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To Blanche 


Preface 


Except for this preface, this study is completely self-contained. It 
is intended to serve both as an introduction to Quantification Theory 
and as an exposition of new results and techniques in “analytic” or 
“‘cut-free’’ methods. We use the term “analytic” to apply to any proof 
procedure which obeys the subformula principle (we think of such a 
procedure as “analysing” the formula into its successive components). 
Gentzen cut-free systems are perhaps the best known example of ana- 
lytic proof procedures. Natural deduction systems, though not usually 
analytic, can be made so (as we demonstrated in [3]). In this study, we 
emphasize the tableau point of view, since we are struck by its simplicity 
and mathematical elegance. 

Chapter I is completely introductory. We begin with preliminary 
material on trees (necessary for the tableau method), and then treat the 
basic syntactic and semantic fundamentals of propositional logic. We 
use the term “‘Boolean valuation” to mean any assignment of truth 
values to all formulas which satisfies the usual truth-table conditions 
for the logical connectives. Given an assignment of truth-values to all 
propositional variables, the truth-values of all other formulas under this 
assignment is usually defined by an inductive procedure. We indicate 
in Chapter I how this inductive definition can be made explicit—to this 
end we find useful the notion of a formation tree (which we discuss 
earlier). 

In Chapter II we give a detailed presentation of our version of the 
tableau method for propositional logic. Our tableaux—which we term 
analytic tableaux—combine certain features of the semantic tableaux 
of Beth with the tableaux of Hintikka. Our tableaux, unlike those of 
Beth, use only one tree instead of two. Hintikka’s tableau method also 
uses only one tree, but each point of the tree is a finite set of formulas, 
whereas in ours, each point consists of a single formula. The resulting 
combination has many advantages—indeed we venture to say that if 
this combination had been hit on earlier, the tableau method would by 
now have achieved the popularity it so richly deserves. 

Chapter III is devoted exclusively to the Compactness Theorem for 
propositional logic—namely that a denumerable set of formulas is (simul- 
taneously) satisfiable providing all its finite subsets are satisfiable. We 
discuss several different proofs because they are analogues of different 
completeness proofs for First-Order Logic. 
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Chapter IV consists of purely introductory material for First-Order 
Logic. Chapter V treats tableaux for First-Order Logic. There we give 
proofs of the well known completeness theorem, compactness theorem 
(for First-Order Logic) and the Skolem-Léwenheim theorem. 

Chapter VI is devoted to the unifying principle which we sketched 
in [2]. Some of the applications of the principle are treated in subsequent 
chapters. 

Chapter VII is devoted to one theorem which should be far more 
widely known and appreciated than it appears to be. We refer to this 
as the Fundamental Theorem of Quantification Theory. It easily yields 
the Completeness Theorem and far more! It is difficult to credit this 
theorem to any one author. It is Herbrand-like in character, but it also 
incorporates many ideas due to Henkin, Hasenjaeger and Beth. 

In Chapter VIII we show how our earlier completeness results can 
be used to etablish the completeness of the more usual Hilbert-type 
axiom systems for First-Order Logic. We start with a system Q, which 
is much like a standard system, though it incorporates some new fea- 
tures—viz avoidance of worry about collision of quantifiers. We then 
consider several other systems, each of which is ostensibly (but not 
really) weaker than the preceeding, ending with a system Q% of partic- 
ular interest. The rules of Q3 are all 1-premise rules, and it is not imme- 
diately obvious that the set of theorems of Q% is closed under modus 
ponens. The completeness of QO} might come as somewhat of a shock 
to those not already familiar with the Fundamental Theorem, but the 
completeness of Q7 is really just about tantamount to the Fundamental 
Theorem. The system Q%, though a Hilbert-type system, has features 
reminiscent of Gentzen’s Extended Hauptsatz. It obeys something rather 
close to the subformula principle, and the only way a sentence can 
possibly be proved in this system is by starting with a tautology and 
then applying purely quantificational rules. A modification of Q% is 
given later in this book which yields a new proof of the Craig Inter- 
polation Lemma, reducing it to the propositional case without appeal 
to prenex normal form. 

In Chapter IX we consider a modernized version of the Henkin- 
Hasenjaeger completeness proof, using an idea due to Beth, with a 
touch of pepper and salt thrown in by the author. It proceeds in a 
slightly more direct manner than any other version we have seen, as 
does also the proof there of the Skolem-Lo6wenheim theorem. 

The material of Chapter X will, we hope, prove of expository value 
even to the experts. There we try to gain some insight into the essential 
differences and similarities between completeness proofs along the 
Lindenbaum-Henkin lines and completeness proofs of cut-free systems. 
We conclude the chapter with a new completeness proof, incorporating 
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an idea suggested verbally by Henkin to the author, and modified so as 
to be applicable to cut-free systems. 

In Chapter XI we study Gentzen systems for propositional logic 
and quantification theory. Using our unified “a, f, y, 6’’ notation, we 
are able to formulate these systems in a uniform manner—i. e. in such 
a way that the logical connectives and quantifiers do not appear explic- 
itly in any of the postulates. This allows of a particularly attractive 
treatment of the metatheory, since 12 cases can then be collapsed into 4. 

Chapter XII consists of Gentzen’s Hauptsatz and related results. 
Our unified notation pays off further in simplifying the proofs. 

Chapter XIII treats the tableau method for prenex formulas. For 
prenex formulas, the tableaux need no branching! The resulting com- 
pleteness proof is substantially that of Dreben-Quine (cf. appendix to 
Quine [1])}—or of Patton [1]. This is very closely related to Gentzen’s 
Extended Hauptsatz (as we see in the next chapter). In concluding 
Chapter XIII, we sketch an interesting alternative completeness proof 
which avoids appeal to any systematic construction of the tree, but 
rather utilizes the Henkin-Hasenjaeger principle in a somewhat different 
context. [In general, we strive throughout this study to consider various 
inter-relationships between the ideas of many authors. |] 

Chapter XIV contains new material on Gentzen systems. After first 
relating Gentzen’s Extended Hauptsatz to the Dreben-Quine complete- 
ness proof, we then consider a new version of the Extended Hauptsatz 
which does not require appeal to prenex normal form. Then we con- 
sider a Gentzen-type system which satisfies a principle stronger than the 
usual subformula principle—1. e. the system is such that if any sequent 
U,—V, is used in a proof of a sequent U-—V, then every term of U, is 
a subformula of some term of U and every term of V, is a subformula 
of some term of V. This feature is crucial for applications in the re- 
maining three chapters. 

In Chapter XV we use this new Gentzen-type system to obtain a 
very easy proof of the Craig Interpolation Lemma. For the benefit of 
the non-experts, this chapter concludes with the usual derivation of the 
Beth definability theorem as a consequence of Craig’s lemma. 

In Chapter XVI we consider new and stronger versions of the com- 
pleteness theorem which we call “symmetric completeness theorems’’. 
These occured to the author as a consequence not of Craig’s Interpolation 
Lemma itself, but rather of certain ideas used in some proofs of the 
Interpolation Lemma. 

Our final chapter contains new systems of Linear Reasoning. We con- 
sider 3 such systems—each of which is related to one of the 3 “symmetric” 
completeness theorems of the preceding chapter. The first system (which 
we express in greater detail than the others) does not require appeal to 
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prenex normal form, and uses the idea of “‘configurations”’ introduced 
by the author in [2]. Our second system comes somewhat closer to the 
original system of Craig (and does appeal to prenex normal form). The 
third system uses neither prenex normal form nor configurations, and 
is closely related to the Fundamental Theorem proved in the preceding 
chapter. 

The author wishes to express his warmest thanks to Sue Ann Walker, 
Robert Cowen, Melvin Fitting and Edwin and Steven Rosenberg for 
much valuable help in the preparation of this manuscript. 
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Part I 


Propositional Logic from the Viewpoint of Analytic Tableaux 


Chapter I 


Preliminaries 


§ 0. Foreword on Trees 


Trees shall play an important role throughout this work, so we 
shall commence with some pertinent definitions: 

By an unordered tree, 7, we shall mean a collection of the following 
items: 

(1) A set S of elements called points. 

(2) A function, 7, which assigns to each point x a positive integer 
¢(x) called the level of x. 

(3) A relation xRy defined in S, which we read “x is a predecessor 
of y” or “y is successor of x”. This relation must obey the following 
conditions: 

C,: There is a unique point a, of level 1. This point we call the origin 
of the tree. 

C,: Every point other than the origin has a unique predecessor. 

C,: For any points x, y, if y is a successor of x, then ?(y)=?(x)+1. 

We shall call a point x an end point if it has no successors; a simple 
point if it has exactly one successor, and a junction point if it has more 
than one successor. By a path we mean any finite or denumerable se- 
quence of points, beginning with the origin, which is such that each term 
of the sequence (except the last, if there is one) is the predecessor of the 
next. By a maximal path or branch we shall mean a path whose last 
term is an end point of the tree, or a path which is infinite. 

It follows at once from C,, C,, C; that for any point x, there exists a 
unique path P, whose last term is x. If y lies on P,,, then we shall say that 
y dominates x, or that x is dominated by y. If x dominates y and x¥y, 
then we shall say that x is (or lies) above y, or that y lies below x. We 
shall say that x is comparable with y if x dominates y or y dominates x. 
We shall say that y is between x and z if y is above one of the pair {x,z} 
and below the other. 

By an ordered tree, 7, we shall mean an unordered tree together with 
a function 6 which assigns to each junction point z a sequence 0(z) which 
contains no repetitions, and whose set of terms consists of all the succes- 
sors of z. Thus, if z is a junction point of an ordered tree, we can speak 
of the 1°,2"4...,n'®,... successors of z (for any n up to the number of 
successors of z) meaning, of course, the 1%',2"¢,...,n'",... terms of 6(z). 
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For a simple point x, we shall also speak of the successor of x as the 
sole successor of x. 

We shall usually display ordered trees by placing the origin at the 
top and the successor(s) of each point x below x, and in the order, from 
left to right, in which they are ordered in the tree. And we draw a line 
segment from x to y to signify that y 1s a successor of x. 

We shall have occasion to speak of adding “new” points as successors 
of an end point x of a given tree 7. By this we mean more precisely the 
following: For any element y outside 7, by the adjunction of y as the 
sole successor of x, we mean the tree obtained by adding y to the set S, 
and adding the ordered pair <x, y> to the relation R (looked at as a set 
of ordered pairs), and extending the function 7 by defining 7(y)=¢ (x) + 1. 
For any distinct elements y,,..., y,, each outside S, by the adjunction of 
Vt>+++» Yn aS respective 15',2"4,...,n' successors of x, we mean the tree 
obtained by adding the y, to S, adding the pairs <x, y,> to R and extending 
f by setting ?(y,)=... =¢(y,)=C(x)+1, and extending the function 6 
by defining 6(x) to be the sequence (y,,..., y,). [It is obvious that the 
extended structure obtained is really a tree]. 

A tree is called finitely generated if each point has only finitely many 
successors. A tree, 7, is called finite if 7 has only finitely many points, 
otherwise the tree is called infinite. Obviously, a finitely generated tree 
may be infinite. 

We shall be mainly concerned with ordered trees in which each 
junction point has at most 2 successors. Such trees are called: dyadic trees. 
For such trees we refer to the first successor of a junction point as the 
left successor, and the second successor as the right successor. 

| Exercise: In a dyadic tree, define x to be to the left of y if there is a 
junction point whose left successor dominates x and whose right successor 
dominates y. Prove that if x is to the left of y and y is to the left of z, 
then x is to the left of z]. 


§ 1. Formulas of Propositional Logic 


We shall use for our undefined logical connectives the following 4 
symbols: 


(1) ~ [read “not” ], (2) A [read “and” ], 
(3) v [read “or” ], (4) > [read “implies” ]. 


These symbols are respectively called the negation, conjunction, dis- 
junction, and implication symbols. The last 3 are collectively called binary 
connectives, the first (~) the unary connective. 
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Other symbols shall be: 

(i) A denumerable set p,,p2,.-., Dy»... of Symbols called propositional 
variables. 

(11) The two symbols (,), respectively called the left parenthesis and 
the right parenthesis (they are used for purposes of punctuation). Until 
we come to First-Order Logic, we shall use the word “variable” to mean 
propositional variable. 

We shall use the letters “p”, “q”, “r’, “s” to stand for any of the variables 
P1>P25-++> Puy ---- Lhe notion of formula is given by the following recursive 
rules, which enable us to obtain new formulas from those already con- 
structed : 


F,): Every propositional variable is a formula. 

F,: If Ais a formula so is ~ A. 

F,,F,,F,: If A, B are formulas so are (A ” B), (A v B), (A > B). 

This recursive definition of “formula” can be made explicit as follows. 
By a formation sequence we shall mean any finite sequence such that each 
term of the sequence is either a propositional variable or is of the form 
~ A, where A is an earlier term of the sequence, or is of one of the forms 
(A ~ B), (A v B), (A > B), where A, B are earlier terms of the sequence. 
Now we can define A to be a formula if there exists a formation sequence 
whose last term is A. And such a sequence is also called a formation 
sequence for A. 

For any formula A, by the negation of A we mean ~ A. It will some- 
times prove notationally convenient to write A’ in place of ~ A. For 
any 2 formulas A, B, we refer to (A ~ B), (A v B), (A > B)as the conjunction, 
disjunction, conditional of A, B respectively. In a conditional formula 
(A > B), we refer to A as the antecedent and B as the consequent. 

We shall use the letters “A”, “B”’, “C”, “xX”, “Y”, “Z” to denote 
formulas. We shall use the symbol “b” to denote any of the binary 
connectives A, Vv, >; and when “b” respectively denotes A, v, > then 
(X bY) shall respectively mean (X A Y), (X v Y), (X > Y). We can thus 
state the formation rules more succinctly as follows: 


F,: Every propositional variable is a formula. 

F,: If X is a formula so is ~X. 

F,: If X, Y are formulas, then for each of the binary connectives b, 
the expression (X b Y) is a formula. 

In displaying formulas by themselves (i.e. not as parts of other 
formulas), we shall omit outermost parentheses (since no ambiguity can 
result). Also, for visual perspicuity, we use square brackets [ | inter- 
changeably with parentheses, and likewise braces { }. Usually we shall 
use square brackets as exterior to parentheses, and braces as exterior to 
square brackets. 
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Example. Consider the following formula: 
(p> AQ@vn)>(@vn)> ~@vs)). 


It is easier to read if displayed as follows: 


{(p> gaA(qvr)]>(pyvn} > ~(qv5). 


Biconditional—we use “X <> Y” as an abbreviation for(X > Y)A(Y> X). 
The formula X<Y is called the biconditional of X, Y. It is read “X if and 
only if Y” or “X is equivalent to Y”. 


Uniqueness of Decomposition. It can be proved that every formula 
can be formed in only one way—i.e. for every formula X, one and only 
one of the following conditions holds : 

(1) X is a propositional variable. 

(2) There is a unique formula Y such that X = Y’. 

(3) There is a unique pair X,, X, and a unique binary connective b 

such that X =(X*, bX,). 
Thus no conjunction can also be a disjunction, or a conditional; no 
disjunction can also be a conditional. Also none of these can also be a 
negation. And, e.g., (X, A X,) can be identical with (Y, A Y,) only if 
X,=/Y, and X,=Y, (and similarly with the other binary connectives). 
We shall not prove this here; perfectly good proofs can be found, e. g. in 
CuHuRCH [1] or KLEENE [1]. 

In our discussion below, we shall consider a more abstract approach 
in which this combinatorial lemma can be circumvented. 


*Discussion. First we wish to mention that some authors prefer the 
following formation rules for formulas: 

Fo: Same as Fo. 

F‘,: If X is a formula, so is ~(X). 

>: If X, Y are formulas, so is (X)b(Y). 
This second set of rules has the advantage of eliminating, at the outset, 
outermost parentheses, but has the disadvantage of needlessly putting 
parentheses around variables. 

It seems to us that the following set of formation rules, though a bit 
more complicated to state, combines the advantages of the two preceeding 
formulations, and involves using neither more nor less parentheses than 
is necessary to prevent ambiguity: 

Fo: Same as before. 

F’,: If X is a formula but not a propositional variable and p is a 
propositional variable, ~(X) and ~p are formulas. 
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F.: If X, Y are both formulas, but neither X nor Y is a propositional 
variable, and if p, gq are propositional variables, then the following 
expressions are all formulas: 


(a) (X)b(Y), 
(b) (X)bq, 
(c) pb(Y), 
(d) pbq. 


In all the above 3 approaches, one needs to prove the uniqueness 
decomposition lemma for many subsequent results. Now let us consider 
yet another scheme (of a radically different sort) which avoids this. 

First of all, we delete the parentheses from our basic symbols. We 
now define the negation of X, not as the symbol ~ followed by the first 
symbol of X, followed by the second symbol of X, etc. but simply as the 
ordered pair whose first term is “~” and whose second term is X. And 
we define the conjunction of X, Y as the ordered triple whose first term 
is X, whose second term is “A” and whose third term is Y. [In contrast, 
the conjunction of X and Y, as previously defined, is a sequence of 
n+m-+3 terms, where n, m are the respective number of terms of X, Y. 
The “3” additional terms are due to the left parenthesis, right parenthesis 
and “~”]. Similarly we define the disjunction (conditional) of X, Y as 
the ordered triple <X,b, Y> where b 1s the binary connective in question. 

Under this plan, a formula is either a (propositional) variable, an 
ordered pair (if it is a negation) or an ordered triple. Now, no ordered 
pair can also be an ordered triple, and neither one can be a single symbol. 
Furthermore, an ordered pair uniquely determines its first and second 
elements, and an ordered triple uniquely determines its first, second and 
third elements. Thus the fact that a formula can be formed in “only one 
way” is now immediate. 

We remark that with this plan, we can (and will) still use parentheses 
to describe formulas, but the parentheses are not parts of the formula. 
For example, we write X \(Yv Z) to denote the ordered triple whose 
first term is X, whose second term is “A”, and whose third term is itself 
the ordered triple whose first, second and third terms are respectively, 
Y, v, Z. But (under this plan) the parentheses themselves do not belong 
to the object language’) but only to our metalanguage’). 

The reader can choose for himself his preferred notion of “formula”, 
since subsequent development will not depend upon the choice. 


1) The term object language is used to denote the language talked about (in this case 
the set of formal expressions of propositional logic), and the term metalanguage is used to 
denote the language in which we are talking about the object language (in the present case 
English augmented by various common mathematical symbols). . 
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Subformulas. The notion of immediate subformula is given explicitly 
by the conditions: 

I): Propositional variables have no immediate subformulas. 

I,: ~X has X as an immediate subformula and no others. 

I,—I,: The formulas X ~ Y, X v Y, X > Y have X, Y as immediate 
subformulas and no others. 

We shall sometimes refer to X, Y respectively as the left immediate sub- 
formula, right immediate subformula of X A Y, X v Y, X > Y. 

The notion of subformula is implicitly defined by the rules: 

S,: If X is an immediate subformula of Y, or if X is identical with Y, 
then X is a subformula of Y. 

S,: If X is a subformula of Y and Y 1s a subformula of Z, then X is 
a subformula of Z. 

The above implicit definition can be made explicit as follows: Y is 
a subformula of Z iff (i.e. if and only if) there exists a finite sequence 
starting with Z and ending with Y such that each term of the sequence 
except the first is an immediate subformula of the preceding term. 

The only formulas having no immediate subformulas are proposi- 
tional variables. These are sometimes called atomic formulas. Other for- 
mulas are called compound formulas. We say that a variable p occurs in 
a formula X, or that p is one of the variables of X, if p is a subformula 
of X. 

Degrees; Induction Principles. To facilitate proofs and definitions by 
induction, we define the degree of a formula as the number of occurrences 
of logical connectives. Thus: 

Do: A variable is of degree 0. 

D,: If X is of degree n, then ~X is of degree n+1. 

D,—D,: If X, Y are of degrees n,,n,, then X A Y, XV Y, X > Yare 
each of degree n,+n,+1. 

Example. 

pA(qv ~r) is of degree 3. 

pA(qvr) is of degree 2. 

We shall use the principle of mathematical induction (or of finite 
descent) in the following form. Let S be a set of formulas (S may be 
finite or infinite) and let P be a certain property of formulas which we 
wish to show holds for every element of S. To do this it suffices to show 
the following two conditions: 

(1) Every element of S of degree 0 has the property P. 

(2) If some element of S of degree >0 fails to have the property P, 
then some element of S of lower degree also fails to have property P. 

Of course, we can also use (2) in the equivalent form: 

(2)’ For every element X of S of positive degree, if all elements of S 
of degree less than that of X have property P, then X also has property P. 
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Formation Trees. It is sometimes useful to display all the subformulas 
of a given formula X in the form of a dyadic tree which we call a formation 
tree for X... which completely shows the pedigree of X. We start the 
tree with the formula X at the origin, and each node of the tree which 
is not a propositional variable “branches” into its immediate subfor- 
mulas. More precisely, a formation tree for X is an ordered dyadic 
tree 7 whose points are formulas (or rather occurrences of formulas, 
since the same formula may have several different occurrences on the 
tree) and whose origin is (an occurrence of) X, and such that the follow- 
ing 3 conditions hold: 

(i) Each end point is (an occurrence of) a propositional variable. 

(ii) Each simple point is of the form ~ Y and has (an occurrence 
of) Y as its sole successor. 

(iii) Each junction point is of the form XbY and has (occurrences 
of) X, Y as respective left and right successors. 

As an example the following is a formation tree for the formula 


[(pAg)>(~pv ~~] v(q> ~p): 


[(prg)>(~pv~~g@lv(q> ~p) 


(pAg)2>(~PV ~~) q>~P 
JN 
PA ~PpVv~~dq q ~P 
IK IN | 
P q ~Dp ~~d p 
| | 
DON 


| 


We might remark that the subformulas of a given formula X are 
precisely those formulas which appear somewhere on the formation 
tree for X. 


§ 2. Boolean Valuations and Truth Sets 


Now we consider, in addition to the formulas of propositional logic, 
a set {t, f} of two distinct elements, t, f. We refer to t, f as truth-values. 
For any set S of formulas, by a valuation of S, we mean a function v 
from S into the set {t, f}—i.e. a mapping which assigns to every ele- 
ment X of S one of the two values t, f. The value v(X)of X under v is 
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called the truth value of X under v. We say that X is true under v if 
v(X)=t, and false under v if v(X)= f. 

Now we wish to consider valuations of the set E of all formulas of 
propositional logic. We are not really interested in all valuations of E, 
but only in those which are “faithful” to the usual “truth-table” rules 
for the logical connectives. This idea we make precise in the following 
definition. 


Definition 1. A valuation v of E is called a Boolean valuation if for 
every X, Y in E, the following conditions hold: 

B,: The formula ~X receives the value t if X receives the value f 
and f if X receives the value t. 

B,: The formula X ” Y receives the value t if X, Y both receive the 
value t, otherwise X A Y receives the value f. 

B,: The formula X v Y receives the value t if at least one of X, Y 
receives the value t, otherwise X v Y receives the value f- 

B,: The formula X>/Y receives the value f if X, Y receive the 

respective values t, f, otherwise X > Y receives the value t. 
This concludes our definition of a Boolean valuation. We say that two 
valuations agree on a formula X if X is either true in both valuations or 
false in both valuations. And we say that 2 valuations agree on a set S 
of formulas if they agree on every element of the set S. 

If S, is a subset of S, and if v,, v, are respective valuations of S,, S,, 
then we say that v, is an extension of v, ifv,,v, agree on the smaller set S,. 

It is obvious that if 2 Boolean valuations agree on X then they agree 
on ~X (why?), and if they agree on both X, Y they must also agree on 
each XA Y, Xv Y, X > Y (why?). By mathematical induction it follows 
that if 2 Boolean valuations of E agree on the set of all atomic elements 
of E (i.e., on all propositional variables) then they agree on all of E. 
Stated otherwise, a valuation vg of the set of all atomic elements of E 
can be extended to at most one Boolean valuation of E. 

By an interpretation of a formula X is meant an assignment of truth 
values to all of the variables which occur in X. More generally, by an 
interpretation of a set W (of formulas) is meant an assignment of truth 
values to all the variables which occur in any of the elements of W. We 
can thus rephrase the last statement of the preceding paragraph by 
saying that any interpretation vg of E can be extended to at most one 
Boolean valuation of E. That vg can be extended to at least one Boolean 
valuation of E will be clear from the following considerations. 

Consider a single formula X and an interpretation vg of X—or for 
that matter any assignment vy of truth values to a set of propositional 
variables which include at least all variables of X (and possibly others). 
It is easily verified by induction on the degree of X that there exists one 
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and only one way of assigning truth values to all subformulas of X such 
that the atomic subformulas of X (which are propositional variables) 
are assigned the same truth values as under vy, and such that the truth 
value of each compound subformula Y of X is determined from the 
truth values of the immediate subformulas of Y by the truth-table rules 
B, —B,.{ We might think of the situation as first constructing a formation 
tree for X, then assigning truth values to the end points in accordance 
with the interpretation v,, and then working our way up the tree, succes- 
sively assigning truth values to the junction and simple points, in terms 
of truth values already assigned to their successors, in accordance with 
the truth-table rules]. In particular, X being a subformula of itself 
receives a truth value under this assignment; if this value is t then we 
say that X is true under the interpretation v,, otherwise false under vo. 
Thus we have now defined what it means for a formula X to be true 
under an interpretation. 

Now consider an interpretation, v,, for the entire set E. Each element, 
X, of E has a definite truth value under v, (in the manner we have just 
indicated); we let v be that valuation which assigns to each element of E 
its truth value under the interpretation v,. The valuation v is on the 
entire set E, and it is easily verified that v is a Boolean valuation, and of 
course, v is an extension of v,. Thus it is indeed the case that every inter- 
pretation of E can be extended to one (and only one) Boolean valuation 
of E. 

Tautologies. The notion of tautology is perhaps the fundamental 
notion of propositional logic. 


Definition 2. X is a tautology iff X is true in all Boolean valuations 
of E. 

Equivalently, X is a tautology iff X is true under every interpretation 
of E. Now it is obvious that the truth value of X under an interpretation 
of E depends only on the truth values assigned to the variables which 
occur in X. Therefore, X is a tautology if and only if X is true under every 
interpretation of X. Letting n be the number of variables which occur 
in X, there are exactly 2” distinct interpretations of X. Thus the task of 
determining whether X is or is not a tautology is purely a finite and 
mechanical one—just evaluate its truth value under each of its 2” inter- 
pretations (which is tantamount to the familiar truth-table analysis). 


Definition 3. A formula X is called (truth-functionally) satisfiable 
iff X is true in at least one Boolean valuation. A set S of formulas is said 
to be (simultaneously) truth-functionally satisfiable iff there exists at 
least one Boolean valuation in which every element of S is true. Such a 
valuation is said to satisfy S. 
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Definition 4. A set S truth-functionally implies a formula X, or X is 
truth-functionally implied by S, or 1s a truth-functional consequence of S 
if X is true in every Boolean valuation which satisfies S. We also say 
that Y is truth-functionally implied by X if Y is truth functionally implied 
by the unit set {X}... i.e. if Y is true in every Boolean valuation in which 
X is true. 


Definition 5. Two formulas X, Y are called truth functionally equi- 
valent iff X, Y are true in the same Boolean valuations. [The reader 
should note that X truth-functionally implies Y iff X > Y is a tautology, 
and that X is truth-functionally equivalent to Y iff the formula XY 
is a tautology |. 


Truth Sets. Let v be a Boolean valuation, and let S be the set of all 
formulas which are true under v. It is immediate from the definition of a 
Boolean valuation that the set S obeys the following conditions (for 
every X,Y): 

S,: Exactly one of the pair (X, ~ X) belongs to S. Stated otherwise 
(~X)eS iff X€S. 

S,: (X a Y)1s in S iff X, Y are both in S. 

S;: (X v Y)isin Siff Xe S or YeS. 

S,: (X > Y)isin S iff X€S or YeS. 

A set S obeying the above conditions will be called saturated or 
will be said to be a truth set. Thus for any Boolean valuation, the set of 
all sentences true under the valuation is saturated. Indeed, if v is an 
arbitrary valuation, and if S is the set of all sentences which are true 
under v, then the following 2 conditions are equivalent: 

(1) vis a Boolean valuation, 
(2) S is saturated. 

Now suppose that we start with a set S, and we define v, to be that 
valuation which assigns t to every member of S, and f to every formula 
outside S. [The function v, is sometimes referred to as the characteristic 
function of the set S.] It is again obvious that S is saturated iff v, is a 
Boolean valuation. 

Now the set of all sentences true under v, is obviously S itself. Thus a 
set is saturated iff it is the set of all sentences true under some Boolean 
valuation. Thus a formula X is a tautology iff it is an element of every 
truth set; stated otherwise, the set of tautologies is the intersection of all 
truth sets and a formula X is satisfiable iff it is an element of some truth 
set. Stated otherwise, the set of satisfiable sentences is the union of all 
truth sets. Likewise a set S truth-functionally implies X iff X belongs to 
every truth set which includes S. 

We thus see that we really do not need to “import” these “foreign” 
elements t, f in order to define our basic semantic notions. In some 
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contexts it is technically more convenient to use t and f and Boolean 
valuations; in other it is simpler to use truth sets. 

Exercise 1 [Truth Functional Equivalence]. We shall use “~” in 
our metalanguage and write X ~ Y to mean that X is equivalent to Y— 
i.e. that the formula X<>Y is a tautology. 

Now suppose that X, ~ X,. Prove the following equivalences: 


~X,~~X,, 

X,AY2XX,A Y; YA X,2~YA X3, 
X,VYxX,v Y; Yv X,~Yv Xp, 
X,> Y2xX,2Y; YO X,~Y>X,. 


Using these facts, show that for any formula Z which contains X, 
as a part, if we replace one or more occurrences of the part X, by X,, 
the resulting formula is equivalent to Z. 

Exercise 2 — [Important for Ch. XV!]. In some formulations of 
propositional logic, one uses “t”, “f” as symbols of the object language 
itself; these symbols are then called propositional constants. And a 
Boolean valuation is redefined by adding the condition that t must be 
given the value truth and f falsehood. [ Thus, e. g. t by itself is a tautology; 
f is unsatisfiable; X > t is a tautology; f> X is a tautology. Also, under 
any Boolean valuation t > Y has the same truth value as Y; X >f has 
the opposite value to X. Thus t > Y 1s a tautology iff Y is a tautology; 
X > f is a tautology iff X is unsatisfiable. | 

Prove the following equivalences: 


(1) XAt~Xx; Xafef, 


(2) Xvtxt; XV{~X, 
(3) X>txt; t>X~X, 
(4) X>f~~x; frXx~t, 
(5) ~t=f; ~fet 


(6) XANYXYAX; XVYXYvxX. 


Using these facts show that every formula X with propositional 
constants is either equivalent to a formula Y which contains no pro- 
positional constants or else it is equivalent to t or to f. 

Exercise 3.Itis convenient to writea conjunction(..(X, AX )A...A X,,) 
as X,AX,A...AX,, and the formulas X,,X,,...,X, are called the 
components of the conjunction. [Similarly we treat disjunctions.] By a 
basic conjunction is meant a conjunction with no repetitions of compo- 
nents such that each component is either a variable or the negation of a 
variable, but no variable and its negation are both components. [ As an 
example, p, A ~p2 p3 1s a basic conjunction—so is ~p, Ap, A ~p3— 
so is ~p, AP2 A /p3.] By a disjunctive normal formula is mean a formula 
C,Vv...VC,, where each C; is a basic conjunction. [As an example the 
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formula (py A ~p2AP3) V(~Pi A P24 Ps) V(~P1 A P24 Pa) is a disjunc- 
tive normal formula.| A disjunctive normal formula is also sometimes 
referred to as a formula in disjunctive normal form. If we allow pro- 
positional constants t, f into our formal language, then the formula f is 
also said to be a disjunctive normal formula. 

Prove that every formula can be put into disjunctive normal form— 
i.e. is equivalent to some disjunctive normal formula. [Hint: Make a 
truth-table for the formula. Each line of the table which comes out “T” 
will yield one of the basic conjunctions of the disjunctive normal form. | 

Exercise 4. A binary connective C is said to be definable from connec- 
tives C,,...,C, if there exists a formula in two variables p, q which uses 
just the connectives C,,...,C, and which is equivalent to the formula 
pCgq. 

As an example, v is definable from {~, A}, because the formula 
~(~pA ~@q) is equivalent to pv q. 


Prove: A is definable from { ~, v}, 
> is definable from {~, A}, 
> is definable from { ~, v }, 
A is definable from { ~, >}, 
v is definable from {~, >}. 


Exercise 5. Let us introduce Sheffer’s stroke symbol “|” as a binary 
connective for propositional logic, and add the formation rule “If X, Y 
are formulas, so is (X|Y)”. [We read “X|Y” as “X is incompatible with Y” 
or “either X or Y is false”.] A Boolean valuation is then re-defined by 
adding the conditions “X|Y is true under v iff at least one of X, Y is false 
under v”: 

(a) Show that | is definable from the other connectives. 

(b) Show that all the other connectives are definable from | (~ is 
definable from | in the sense that there is a formula ¢(p) involving just 
the stroke connective and one propositional variable p such that ¢~(p) 
is equivalent to ~p). 

Do the same for the joint denial connective | (where X|Y is read 
“both X, Y are false”). Show that all other connectives are definable 
from |. 

It can be shown that |, | are the only binary connectives which suffice 
to define all other connectives. [This is not easy! The “virtuoso” reader 
might wish to try his hand at this as an exercise. | 
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Chapter II 
Analytic Tableaux 


We now describe an extremely elegant and efficient proof procedure 
for propositional logic which we will subsequently extend to first order 
logic, and which shall be basic to our entire study. This method, which 
we term analytic tableaux, is a variant of the “semantic tableaux” of 
Beth [1], or of methods of Hintikka [1]. (Cf. also Anderson and 
Belnap [1].) Our present formulation is virtually that which we intro- 
duced in [1]. Ultimately, the whole idea derives from Gentzen [1], and 
we shall subsequently study the relation of analytic tableaux to the 
original methods of Gentzen. 
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We begin by noting that under any interpretation the following eight 
facts hold (for any formulas X, Y): 


1) a) If ~X 1s true, then X is false. 
b) If ~X is false, then X is true. 
2) a) Ifa conjunction X A Y is true, then X, Y are both true. 
b) If a conjunction X ” Y is false, then either X is false or Y is false. 
3) a) Ifa disjunction X v Y is true, then either X is true or Y is true. 
b) Ifa disjunction X v Y is false, then both _X, Y are false. 
4) a) If X > Ys true, then either X is false or Y is true. 
b) If X > Y is false, then X is true and Y is false. 


These eight facts provide the basis of the tableau method. 

Signed Formulas. At this stage it will prove useful to introduce the 
symbols “T”’, “F” to our object language, and define a signed formula as 
an expression TX or FX, where X is a (unsigned) formula. (Informally, 
we read “TX” as “X 1s true” and “FX” as “X is false”) 


Definition. Under any interpretation, a signed formula TX is called 
true if X is true, and false if X is false. And a signed formula FX is called 
true if X is false, and false if X is true. 

Thus the truth value of TX is the same as that of X; the truth value 
of FX is the same as that of ~ X. | 

By the conjugate of a signed formula we mean the result of changing 
“T” to “F” or “F” to “T” (thus the conjugate of TX is FX; the conjugate 
of FX is TX). 

Illustration of the Method of Tableaux. Before we state the eight rules 
for the construction of tableaux, we shall illustrate the construction 
with an example. 
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Suppose we wish to prove the formula [p v (qa r)] > [(pv q)A (pv n)]. 
The following is a tableau which does this; the explanation is given 
immediately following the tableau: 


(1) Flpvqan|>[@vga(pvn] 
(2) Tpv(qar) 
(3) Fpvq)a(pvr) 


(4) Tp (5) T(qar) 
(6) Tq 
(8) F(pvq) (9) F(pvr) (7) Tr 
(12) Fp (14) Fp 
(13) Fq (15) Fr (10) F(p vq) (11) F(pvr) 
(16) Fp (18) Fp 
x x (17) Fq (19) Fr 
xX xX 


Explanation. The tableau was constructed as follows. We see if we 
can derive a contradiction from the assumption that the formula 
[pv (qar)|>[(pvgA(pvn)] is false. So our first line consists of this 
formula preceded by the letter “F”. Now, a formula of the form X > Y 
can be false only if X is true and Y is false. (Cf. condition B, of a Boolean 
valuation.) Thus (in the language of tableaux) TX and FY are direct 
consequences of the (signed) formula F(X > Y). So we write the lines 
(2) and (3) as direct consequences of line (1). Now let us look at line (2); 
it is of the form T(X v Y) (where X =p, Y=(q Ar).) We can not draw any 
direct conclusion about the truth value of X nor about the truth value of 
Y; all we can infer is that either TX or TY. So the tableau branches into 
two columns; one for each possibility. Thus line (2) branches into lines (4) 
and (5). Line (5), viz. T(q Ar) immediately yields Tg and Tr as direct 
consequences; we thus have lines (6) and (7). Now look at (3). It is of the 
form F(X ” Y). This means that either F X or FY. We also know that 
either (4) or (5) holds. So for each of the possibilities (4), (5) we have one 
of the two possibilities F X, F Y. There are hence now four possibilities. 
So each of the branches (4), (5) branches again into the possibilities F X, 
F Y. More specifically, (4) branches to (8), (9), and (5) branches to (10), (11) 
(which are respectively the same as (8), (9)). Lines (12), (13) are direct conse- 
quences of (8); (14), (15) are direct consequences of (9); (16), (17) of (10); 
and (18), (19) of (11). 

We now look at the leftmost branch and we shall see that (12) is a 
direct contradiction of (4) (i.e. it is the conjugate of (4)), so we put a cross 
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after (13) to signify that this branch leads to a contradiction. Similarly, 
(14) contradicts (4), so we “close” the branch leading to (15}—1.e. we 
put a cross after (15). The next branch is closed by virtue of (17) and (6). 
Finally, the rightmost branch is closed by virtue of (19) and (7). Thus all 
branches lead to a contradiction, so line (1) is untenable. Thus 
[pv (qar)]>[@vqaA(pvn)] can never be false in any interpretation, 
so it is a tautology. 


Remarks. (i) The numbers put to the left of the lines were only for the 
purpose of identification in the above explanations; we do not need 
them for the actual construction. 

(ii) We could have closed some of our branches a bit earlier; lines 
(13), (15) are superfluous. In subsequent examples we shall close a branch 
as soon as a contradiction appears (a contradiction that is of the form of 
two formulas F X, TX). 

Rules for the Construction of Tableaux. We now state all the rules in 
schematic form; explanations immediately follow. For each logical 
connective there are two rules; one for a formula preceded by “T”, the 
other for a formula preceded by “F”: 


1) T~X F~X 
FX TX 
2) T(X A Y) F(X a Y) 
TX FX|FY 
TY 
3) T(X v Y) F(X v Y) 
TX|TY FX 
FY 
4) T(X > Y) F(X > Y) 
FX|TY TX 
FY 


Some Explanations. Rule 1) means that from T~ X we can directly 
infer F X (in the sense that we can subjoin FX to any branch passing 
through T ~ X) and that from F ~ X we can directly infer TX. Rule 2) 
means that T(X A Y) directly yields both TX, TY, whereas F(X A Y) 
branches into F X, F Y. Rules 3) and 4) can now be understood analogously. 

Signed formulas, other than signed variables, are of two types; 
(A) those which have direct consequences (viz. F~ X, T~ X, T(X ‘ Y), 
F(X v Y), F(X > Y)); (B) those which branch (viz. F(X 4 Y), T(X v Y), 
T(X > Y)). 
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It is practically desirable in constructing a tableau, that when a line 
of type (A) appears on the tableau, we simultaneously subjoin its con- 
sequences to all branches which pass through that line. Then that line 
need never be used again. And in using a line of type (B), we divide all 
branches which pass through that line into sub-branches, and the line 
need never be used again. For example, in the above tableau, we use (1) 
to get (2) and (3), and (1) is never used again. From (2) we get (4) and (5), 
and (2) is never used again. Line (3) yields (8), (9), (10), (11) and (3) is 
never used again, etc. 

If we construct a tableau in the above manner, it is not difficult to 
see, that after a finite number of steps we must reach a point where 
every line has been used (except of course, for signed variables, which 
are never used at all to create new lines). At this point our tableau is 
complete (in a precise sense which we will subsequently define). 

One way to complete a tableau is to work systematically down- 
wards i.e. never to use a line until all lines above it (on the same branch) 
have been used. Instead of this procedure, however, it turns out to be 
more efficient to give priority to lines of type (A}—i.e. to use up all 
such lines at hand before using those of type (B). In this way, one will 
omit repeating the same formula on different branches; rather it will 
have only one occurrence above all those branch points. 

As an example of both procedures, let us prove the formula 
[(p>(q>n])>[o>qM>->(p—>7)]. The first tableau works systemati- 
cally downward; the second uses the second suggestion. For the con- 
venience of the reader, we put to the right of each line the number of 
the line from which it was inferred. 


First Tableau 


(1) F[p>q>n]>[~P>9>(P>n)] 
(2) Tp > (q>7n) (1) 


(3) F(p>q)> (p> 7) ()) 

(4) F p (2) (5) T(q > r) (2) 

(6) T(p > q) (3) (8) T(p > q) (3) 

(7) F(p > r) (3) (9) F(p > r) (3) 

(10) Fp (6) | (11) Tq (6) (14) Fq (5) (15) Tr (5) 

(12) Tp (7) | (13) Tp (7) | (16) Fp (8) | (17) Tq (8) | (18) Fp (8) | (19) Tq (8) 
Xx x (20) Tp (9) x (21) Tp (9) | (22) Tp (9) 
xX x (23) Fr (9) 


x 
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Second Tableau 


(1) Fip>@q@>n]>[P >> (p> n)] 
(2) Tp>(q>7r) (1) 

(3) F(p>qg)>(p>n) (1) 

(4) T(p > q) (3) 

(5) F(p>r) (3) 


(6) Tp (5) 
(7) Fr (5) 
(8) Fp (2)| (9) T(q=>r) (2) 
Xx (10) Fp (4) (11) Tq (4) 
x (12) Fq (9) | (13) Tr (9) 


x x 


It is apparent that Tableau (2) is quicker to construct than Tableau (1), 
involving only 13 rather than 23 lines. 

As another practical suggestion, one might put a check mark to the 
right of a line as soon as it has been used. This will subsequently aid 
the eye in hunting upward for lines which have not yet been used. (The 
check marks may be later erased, if the reader so desires.) 

The method of analytic tableaux can also be used to show that a 
given formula is a truth functional consequence of a given finite set of 
formulas. Suppose we wish to show that X > Z is a truth-functional 
consequence of the two formulas X > Y, Y> Z. We could, of course, 
simply show that [(X > Y)A(Y > Z)] >(X > Z) is a tautology. Alter- 
natively, we can construct a tableau starting with 


T(X > Y), 

T(Y >Z), 

F(X > Z) 
and show that all branches close. 

In general, to show that Y is truth-functionally implied by X,,...,X,,, 
we can construct either a closed analytic tableau starting with 
F(X, A...AX,)> Y, or one starting with 

TX, 
TX, 
FY 
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Tableaux using unsigned formulas. Our use of the letters “T” and 
“F”, though perhaps heuristically useful, is theoretically quite dispen- 
sible—simply delete every “T” and substitute “~” for “F”. (In which 
case, incidentally, the first half of Rule 1) becomes superfluous.) The 
rules then become: 


~~X 
1) X 
» XAY  >(Xa¥) 
X ~X|~Y 
Y 
3) XVY ~(X v Y) 
xX|Y ~X 
~Y 
4 X>Y ~(X > Y) 
) Ixy — xX 
~Y 


In working with tableaux which use unsigned formulas, “closing” 
a branch naturally means terminating the branch with a cross, as soon 
as two formulas appear, one of which is the negation of the other. A 
tableau is called closed if every branch is closed. 

By a tableau for a formula X, we mean a tableau which starts with X. 
If we wish to prove a formula X to be a tautology, we construct a tableau 
not for the formula X, but for its negation ~ X. 

A Unifying Notation. It will save us considerable repetition of essen- 
tially the same arguments in our subsequent development if we use the 
following unified notation which we introduced in [2]. 

We use the letter “x” to stand for any signed formula of type A—i.e. 
of one of the five forms T(X A Y), F(X v Y), F(X > Y), T~ X, F~X. 
For every such formula a, we define the two formulas «, and «, as follows: 


Ifa=T(X AY), then a, = TX and «,=TY. 
Ifa=F(XvY), thena, =F X ando,=FY. 
If «= F(X > Y), then a, = TX and «,=FY. 
Ifa=T~X, theno,=FX anda,=FX. 
Ifa=F~X, thena,= TX anda,=TX. 
For perspicuity, we summarize these definitions in the following 
table: 
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We note that in any interpretation, « is true iff «,, «, are both true. 
Accordingly, we shall also refer to an « as a formula of conjunctive type. 

We use “f” to stand for any signed formula of type B—i.e. one of the 
three forms F(X A Y), T(X v Y), T(X > Y). For every such formula £, 
we define the two formulas f,, 6, as in the following table: 


In any interpretation, f is true iff at least one of the pair B,, B, is true. 
Accordingly, we shall refer to any B-type formula as a formula of dis- 
junctive type. 

We shall sometimes refer to «, as the first component of a and «, as 
the second component of «. Similarly, for p. 

By the degree of a signed formula TX or F X we mean the degree 
of X. We note that «,, «, are each of lower degree than a, and f,, B, are 
each of lower degree than f. Signed variables, of course, are of degree 0. 

We might also employ an a, f classification of unsigned formulas 
in an analogous manner, simply delete all “T”’, and replace “F” by “~”. 
The tables would be as follows: 
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Let us now note that whether we work with signed or unsigned for- 
mulas, all our tableaux rules can be succinctly lumped into the follow- 
ing two 

Rule A — a Rule B— 8B 
Oy B, | B, 


5) 


N.B. In working with signed formulas, there arise situations in which 
it is better to regard signed formulas of the form T~X or F~X as of 
both the «-type and the B-type. If we agree to let B be such a formula, 
it still remains true that under any interpretation, f is true iff at least 
one of f,, B, is true (for in such a case, B, and P, are identical expres- 
sions). Under this extended use of “B”, Rule B when applied to an ex- 
pression T~ X or F~X would yield two identical branches. So in 
practice, we need consider only one. Indeed, in practice we need con- 
sider only one branch even in other cases when f, and f, are identical— 
e.g. if B = T(X v X) it would be pointless to divide the tableau into two 
branches, TX and TX! 

Some Properties of Conjugation. One reason for the desirability of 
using “B” in the extended manner which we just discussed, is that our 
operation of conjugation obeys the following pleasant symmetric laws: 


Jo: (a) X is distinct from X; 
(b) X=X. 
J,: (a) The conjugate of any @ is some f. 
(b) The conjugate of any Pf is some a. 
Jy: (a) (%), = % 5 (%)> =O; 
(b) (6), =B,; (B)2 = Bo. 

Law J, — (a) would fail under the original definition of £. 

Law J, says that if we take any signed formula X other than a signed 
variable, if we first conjugate X and then take the first (second) com- 
ponent of this conjugate, we obtain the same result as if we first take the 
first (respectively second) component of X and then conjugate it. (For ex- 
ample, suppose a= F(X > Y). Then «= T(X > Y), (&), =F X,(®), =TY. 
On the other hand, a, = TX,a,=F Y, so a, =F X, &, = TY). The reader 
can verify the remaining four cases for a and similarly the cases for B. 

We note that J, can be equivalently stated as follows: If « is the 
conjugate of f, then a, is the conjugate of B, and a, is the conjugate of £,. 

Truth Sets re-visited. For the moment let us work with unsigned for- 
mulas (interpreting “ax” and “B” accordingly). Let S be a set of unsigned 
formulas. We leave it to the reader to verify that S is a truth set (as defined 
in Chapter I) if and only if S has the following three properties (for 
every X, a, p): 
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(0) Exactly one of X,~X belongs to S. 

(A) « belongs to S if and only if «,, 7, both belong to S. 

(B) B belongs to S if and only if at least one of B,, B, belong to S. 

We shall also refer to a set S of signed formulas as a valuation set 
or truth set if it obeys conditions (A), (B) above and in place of (0), the 
condition “exactly one of TX, FX belongs to S”. We shall also refer to 
valuation sets of signed formulas as saturated sets. 

Exercise. Show that if a set S of unsigned formulas satisfies (A), (B) 
above and in place of (0) the weaker condition “for every propositional 
variable p, exactly one of p, ~p lies in S” then it follows that for every 
formula X, exactly one of X, ~X lies in S—ie. that S is then a truth 
set. State and prove an analogous result for signed formulas. 

We have defined a set S of signed formulas to be a truth set if it 
satisfies the laws: 

(0) For any X, exactly one of X, X belongs to S. 

(a) aeS iff «,eS and a,eéS. 

(b) BeS iff B,eS or B,éS. 

We wish to point out that (b) is superfluous in the presence of (0) 
and (a) and also that (a) is superfluous in the presence of (0) and (5). Let 
us prove that (b) follows from (0) and (a)—in doing this it will shorten 
our work to use our laws J, — J. on conjugation. Assume now that S 
satisfies conditions (0), (a). We must show that f belongs to S iff B, 
belongs to S or B, belongs to S. Suppose that feS. If neither B, nor p, 
belonged to S, then f, and B, would belong to S (since by (0) at least 
one of B,, B, belongs to S and at least one of £,, B, belongs to S). Now 
we use the fact that B is some a, and B, = = Oy B,=4a,.S0 «,,a, both belong 
to S. Then by (a), « belongs to S—i.e. B belongs to S. This would mean 
that B, B both belong to S, contrary to condition (0). This proves the 
first half. Conversely, suppose at least one of B,,f, belongs to S—let 
us say f, (a perfectly analogous argument works for £,). If B failed to 
belong to S, then B belongs to S. But f is some a, hence by (a), (B), and 
(B), belong to S—hence (by J3) 8, belongs to S. This implies B, and B, 
both belong to S, contrary to condition (0). This concludes the proof. 

We leave it to the reader to verify that it is likewise possible to obtain 
(a) from (0) and (b). We also remark that the same result holds for truth 
sets of unsigned formulas (but the verification can not be carried out as 
elegantly, since we have no conjugation operation satisfying Jo,J,,J,; 
the proof must be ground out by considering all cases separately.) 

Exercise. Call a set downward closed if for every a and f, (1) if « is 
in S, then «,,a, are both in S; (2) if B is in S, then at least one of B,,f, 
is in S. Call a set upward closed if the converse conditions hold—.e. (1) 
if %,,, are both in S, so is «;(2) if either 6, or B, is in S, so is B. Show that 
any downward closed set satisfying condition (0) (viz. that for every X, 
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exactly one of X,X is in S) is a truth set. Show that any upward closed 
set satisfying (0) is a truth set. 

Precise Definition of Tableaux. We have deliberately waited until 
the introduction of our unified notation in order to give a precise defini- 
tion of an analytic tableau, since the definition can now be given more 
compactly. 


Definition. An analytic tableau for X is an ordered dyadic tree, whose 
points are (occurrences of) formulas, which is constructed as follows. 
We start by placing X at the origin. Now suppose 7 1s a tableau for X 
which has already been constructed; let Y be an end point. Then we 
may extend 7 by either of the following two operations. 

(A) If some « occurs on the path Py, then we may adjoin either a, 
or a, as the sole successor of Y. (In practice, we usually successively 
adjoin a, and then «,.) 

(B) If some B occurs on the path Py, then we may simultaneously 
adjoin B, as the left successor of Y and f, as the right successor of Y. 

The above inductive definition of tableau for X can be made explicit 
as follows. Given two ordered dyadic trees 7, and 7.,, whose points 
are occurrences of formulas, we call 7 , a direct extension of 7 , if 7, 
can be obtained from 7 , by one application of the operation (A) or (B) 
above. Then 7 is a tableau for X iff there exists a finite sequence 
(7 14,7 9, ...5 F_,=ZT) such that 7, is a 1-point tree whose origin is X 
and such that for each i<n,7,;,, is a direct extension of 7,. 

To repeat some earlier definitions (more or less informally stated) 
a branch @ of a tableau for signed (unsigned) formulas is closed if it 
contains some signed formula and its conjugate (or some unsigned for- 
mula and its negation, if we are working with unsigned formulas.) And 7 
is called closed if every branch of 7 is closed. By a proof of (an unsigned 
formula) X is meant a closed tableau for F X (or for ~ X, if we work with 
unsigned formulas.) 

Exercise. By the tableau method, prove the following tautologies: 


(1) q>(p>4q) 

(2) (p> gaAqg>n)>(p>r) 

(3) (p> 4) A(p>7)) > (p> (Gan) 
(4) [(p>naqan)rA(pvaglar 
(5) ~(pAq)>(~Pv ~4q) 

(6) ~(pvqg)>(~PA ~q) 

(7) (~pv ~g)> ~(PAq) 

(8) (py(qan)> (PY gaAvn) 
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Consistency. It is intuitively rather obvious that any formula provable 
by the tableau method must be a tautology—equivalently, given any 
closed tableau, the origin must be unsatisfiable. This intuitive conviction 
can be justified by the following argument. 

Consider a tableau Y and an interpretation vy whose domain 
includes at least all the variables which occur in any point of 7. Let us 
call a branch 0 of 7 true under vg if every term of @ is true under vp. 
And we shall say that the tableau 7 (as a whole) is true under v, iff at 
least one branch of 7 is true under vp. 

The next step is to note that ifa tableau 7 , is an immediate extension 
of 7 ,, then 7 , must be true in every interpretation in which 7 , is true. 
For if 7, is true, it must contain at least one true branch 0. Now 7, 
was obtained from 7 , by adding one or two successors to the end point 
of some branch 6, of 7 ,; if 0, is distinct from 0, then @ is still a branch 
of 7 ,, hence 7 , contains the true branch 0, so 7, is true. On the other 
hand, suppose @ is identical with 6,—1.e. suppose @ is the branch of 7 , 
which was extended in 7,. If 8 was extended by operation (A), then 
some « appears as a term in 0, and 6 has been extended either to (6,,«,) 
or to (0,,a,), so either (0,,«,) or (0,,a,) is a branch of 7,. But a,,a, 
are both true since a is, hence 7, contains the true branch (0,,«,) or 
(0,,a,). If @ was extended by operation (B), then some f occurs in 8 and 
both (6,,8,) and (0,,6,) are branches of 7 ,. But since f is true, then at 
least one of B,,f8, is true, hence one of the branches (6,,8,) or (0,,B;5) 
of 7 , is true, so again 7 , is true. 

We have thus shown that any immediate extension of a tableau which 
is true (under a given interpretation) is again true (under the given inter- 
pretation). From this it follows by mathematical induction that for any 
tableau 7, if the origin is true under a given interpretation vy, then 7 
must be true under vy. Now a closed tableau Y obviously cannot be 
true under any interpretation, hence the origin of a closed tableau cannot 
be true under any interpretation—.e. the origin of any closed tableau 
must be unsatisfiable. From this it follows that every formula provable 
by the tableau method must be a tautology. It therefore further follows 
that the tableau method is consistent in the sense that no formula and its 
negation are both provable (since no formula and its negation can both 
be tautologies). 

Completeness. We now consider the more delicate converse situation: 
Is every tautology provable by the method of tableaux? Stated otherwise, 
if X is a tautology, can we be sure that there exists at least one closed 
tableau starting with FX? We might indeed ask the following bolder 
question: If X is a tautology, then will every complete tableau for F X 
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close? An affirmative answer to the second question would, of course, 
be even better than an affirmative answer to the first, since it would mean 
that any single completed tableau 7 for F X would decide whether X 
is a tautology or not. 

Before the reader answers the question too hastily, we should consider 
the following. If we delete some of the rules for the construction of 
tableaux, it will still be true that a closed tableau for F X always indicates 
that X is a tautology. But if we delete too many of the rules, then we 
may not have left enough power to always derive a closed tableau for F X 
whenever X is a tautology. (For example, if we delete the first half of 
the conjunction rule, then it would be impossible to prove the tautology 
(p Aq) > p, though it would still be possible to prove p>[q>(paq)]. 
If we delete the second half but retain the first half, then we could prove 
the first tautology above, but not the second.) The question, therefore, is 
whether our present set of rules is sufficient to do this. Our present 
purpose is to show that they are sufficient. 

We shall give the proof for tableaux using signed formulas (the 
modifications for tableaux using unsigned formulas are obvious—or 
indeed the result for tableaux for unsigned formulas follows directly 
from the result for tableaux with signed formulas.) 

We are calling a branch @ of a tableau complete if for every « which 
occurs in 0, both «, and «, occur in 6, and for every f which occurs in @, 
at least one of B,,8, occurs in 0. We call a tableau 7 completed if every 
branch of 7 is either closed or complete. We wish to show that if 7 is 
any completed open tableau (open in the sense that at least one branch is 
open), then the origin of 7 is satisfiable. More generally, we shall show 


Theorem 1. Any complete open branch of any tableau is (simultan- 
eously) satisfiable. | 

We shall actually prove something stronger. Suppose @ is a complete 
open branch of a tableau 7 ; let S be the set of terms of 0. Then the set S$ 
satisfies the following three conditions (for every a, f): 


H,: No signed variable and its conjugate are both in S’). 
H,: If weS, then a,¢S and a,éS. 
H,: If BeS, then B, eS or B,e€S. 


Sets S—whether finite or infinite—obeying conditions H,,H,,H, 
are of fundamental importance—we shall call them Hintikka sets (after 
Hintikka who studied their properties explicitly). We shall also refer to 


') Indeed no signed formula and its conjugate appear in S, but we do not need to involve 
this stronger fact. 
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Hintikka sets as sets which are saturated downwards. We shall also 
call any finite or denumerable sequence @ a Hintikka sequence if its set of 
terms is a Hintikka set. | 

Let us pause for a moment to compare the notion of downward 
saturation with that of saturation discussed earlier (cf. the preceding 
section on truth sets re-visited). The definition of a saturated set differs 
from that of a Hintikka set in that in H,,H, “if” is replaced by “if and 
only if’, and H, is strengthened to condition (0). So every saturated set is 
obviously also a Hintikka set. But a Hintikka set need not be saturated 
(e.g. any set of signed variables, which contains no signed variable and its 
conjugate, vacuously satisfies H,,H,, but such a set is certainly not 
saturated.) 

Theorem | is substantially to the effect that every finite Hintikka set 
S is satisfiable. The finiteness of S, however, is not needed in the proof 
(nor does it even simplify the proof), so we shall prove 


Hintikka’s Lemma. Every downward saturated set S (whether finite 
or infinite) is satisfiable. 

We remark that Hintikka’s lemma is equivalent to the statement that 
every Hintikka set can be extended to a (i.e. is a subset of some) saturated 
set. We remark that Hintikka’s lemma also holds for sets of unsigned 
formulas (where by a Hintikka set of unsigned formulas we mean a 
set S satisfying H,,H, and in place of Ho, the condition that no variable 
and its negation are both elements of S). 


Proof of Hintikka’s Lemma. Let S be a Hintikka set. We wish to 
find an interpretation in which every element of S is true. Well, we 
assign to each variable p, which occurs in at least one element of S, a 
truth value as follows: 

(1) If TpeS, give p the value true. 

(2) If FpeS, give p the value false. 

(3) If neither Tp nor F p is an element of S, then give p the value true 
or false at will (for definiteness, let us suppose we give it the value true.) 

We note that the directions (1), (2) are compatible, since no Tp and 
F p both occur in S (by hypothesis Hy). We now show that every element 
of S is true under this interpretation. We do this by induction on the 
degree of the elements. 

It is immediate that every signed variable which is an element of S 
is true under this interpretation (the interpretation was constructed to 
insure just this). Now consider an element X of S of degree greater than 0, 
and suppose all elements of S of lower degree than X are true. We wish 
to show that X must be true. Well, since X is of degree greater than zero, 
it must be either some « or some f. 
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Case 1. Suppose it is an a. Then «,,«, must also be in S (by H,). 
But «,,a, are of lower degree than «. Hence by inductive hypothesis 
a, and «, are both true. This implies that « must be true. 

Case 2.Suppose X is some f. Then at least one of B,, 8, 1s in S (by H,). 
Whichever one is in S, being of lower degree than f, must be true (by 
inductive hypothesis). Hence f must be true. This concludes the proof. 


Remark. If we hadn’t used the unifying “a, 8” notation, we would have 
had to analyze eight cases rather than two. 

Having proved Hintikka’s lemma, we have, of course, also proved 
Theorem 1. This in turn implies 


Theorem 2. (Completeness Theorem for Tableaux) 
(a) If X is a tautology, then every completed tableau starting with 
F X must close. 

(b) Every tautology is provable by the tableau method. 

To derive statement (a) from Theorem 1, suppose 7 is a complete 
tableau starting with F X. If 7 is open, then F X is satisfiable (by Theo- 
rem 1), hence X cannot be a tautology. Hence if X is a tautology then 7 
must be closed. 

Let us note that for S, a finite Hintikka set, the proof of Hintikka’s 
lemma effectively gives us an interpretation which satisfies S. Therefore, 
if X is not a tautology, then a completed tableau for F X provides us 
with a counterexample of X (i.e. an interpretation in which X is false). 


Example. Let X be the formula (pv q) > (pq). Let us construct a 
completed tableau for FX: 


(1) Fipvq)> (pq) 
(2) T(pv q) (1) 
(3) F(p aq) (1) 
(4) Tp (2) (5) Tq (2) 
(6) - p(3) | (7) Fq(3) | (8) Fp(3) | (9) Fq(3) 
XxX 


This tableau has two open branches. Let us consider the branch 
whose end point is (7). Acording to the method of Hintikka’s proof, 
if we declare p true and q false, we have an interpretation which satisfies 
all lines of this branch. (The reader can verify this by successively showing 
that (3), (2), (1) are true under this interpretation. Hence F(p v q) > (pA q) 
is true under this interpretation, which means (pv q) >(pq) is false 
under this interpretation. Likewise the open branch terminating in (8) 
gives us another interpretation (viz. q is true, p is false) which is a counter- 
example to X. 
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Tableaux for Finite Sets. If S is a finite set {X,,..., X,}, by a tableau 
for S is meant a tableau starting with 
xX, 
©) 
Xn 
and then continued using Rules A, B. 
We leave it to the reader to modify our previous arguments for 
tableaux for single formulas, and prove 


Theorem. A finite set S is unsatisfiable iff there exists a closed tableau 
for S. 

We shall consider tableaux for infinite sets in a subsequent chapter. 

Exercise. There is another way of proving the completeness theorem 
which does not use Hintikka’s lemma. 

Show (without use of the completeness theorem): (1) If there exists a 
closed tableau for SU {a,,a,} then there exists a closed tableau for 
Su fal; (2) if there exist closed tableaux for SU{B,} and for SU{f,}, 
then there exists a closed tableau for SU {f}; (3) If all elements of S 
are of degree 0, and S is unsatisfiable, then there exists a closed tableau 
for S (trivial). 

Now define the degree of a finite set S to be the sum of the degrees of 
the elements of S. Using (1), (2), (3) above, show by induction on the 
degree of S that if S is unsatisfiable, then there exists a closed tableau for S. 

Atomically Closed Tableaux. Let us call a tableau atomically closed 
if every branch contains some atomic element and its conjugate. [ By 
an atomic element we mean a propositional variable, if we are working 
with unsigned formulas, and a signed propositional variable if we are 
working with signed formulas. If we are working with unsigned formulas, 
then by an atomically closed tableau we mean a tableau in which every 
branch contains some propositional variable and its negation. | 

Suppose we construct a completed tableau 7 for a set S, and declare 
a branch “closed” only if it is atomically closed. Now suppose 7 contains 
an (atomically) open branch B. Then the set of elements of B is still a 
Hintikka set (because condition H, requires only that the set contain no 
atomic elements and its conjugate), hence is satisfiable (by Hintikka’s 
lemma). We thus have: 


Theorem. If S is unsatisfiable, then there exists an atomically closed 
tableau for S. 


Corollary. If there exists a closed tableau for S, then there exists an 
atomically closed tableau for S. 
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We remark that the above corollary can be easily proved directly 
(i.e. without appeal to any completeness theorem)—cf. Ex. 1 below. 

Exercise 1. (a) Show directly by induction on the degree of X that 
there exists an atomically closed tableau for any set S which contains 
both X and its conjugate X. 

(b) Using (a), show that any closed tableau can be further extended 
to an atomically closed tableau. 

Exercise 2. Tableaux also provide a method of putting (unsigned) 
formulas into disjunctive normal form (cf. Ex. 3, end of Chapter I). 

Suppose 7 is an open but completed tableau for (the unsigned for- 
mula) X. Let B,,...,B, be the open branches of 7, and for each i<n, 
let C,; be the conjunction of the variables which appear in B; and those 
negations ~p (of variables) which appear in B; (the order of the con- 
junction is immaterial). Show that C,v-.-v C, 1s a disjunctive normal 
form for X. 

Exercise 3. Suppose we take Sheffer’s stroke symbol | as our sole 
connective for propositional logic (cf. Ex. 5 end of Chapter I). Show that 
the following tableau rules give a complete and correct system for pro- 
positional logic. 


FX|Y TX|Y 

Rule l: —— Rule 2: ———— 
TX FX|FY 
TY 


What are the corresponding two rules if we use | instead of | (cf. Exercise 5 
at end of Chapter I)? 


Chapter III 


Compactness 


§ 1. Analytic Proofs of the Compactness Theorem 


Let us consider a finite or denumerable set S of formulas. We recall 
that a Boolean valuation v is said to satisfy S iff all the elements of S 
are true under v, and that S is satisfiable iff S is satisfied by at least one 
Boolean valuation. 

We now consider the following question. Suppose that S is a de- 
numerably infinite set such that every finite subset of S is satisfiable. 
Does it necessarily follow that S is satisfiable? In other words, if for 
every finite subset Sy of S there is a Boolean valuation which satisfies S,, 
does it follow that there is a Boolean valuation under which all the ele- 
ments of S are simultaneously true? 
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We can pose the question in another way. Consider S arranged in 
some denumerable sequence X,,X>,...,X,,.... To say that every finite 
subset of S is satisfiable is to say nothing more nor less than that for 
each n, the set {X,,..., X,,} is satisfiable. For clearly, if all finite subsets 
of S are satisfiable, then for any n, the finite set {X,,..., X,,} is satisfiable. 
Conversely, suppose that for each n, the set {X,,..., X,} is satisfiable. 
Then any finite subset S, of S is a subset of {X,,...,X,} for some n, 
and hence is satisfiable. 

We can thus look at the question as follows. Suppose that there is 
some Boolean valuation v, in which X, is true, and that there is a Boolean 
valutation v, (but not necessarily the same as v,!) in which X, and X, 
are both true, and for each n there is a Boolean valuation v, in which 
the first n terms are true. Does there necessarily exist one Boolean 
valuation v in which all the X, are simultaneously true? 

We shall call a set S consistent if every finite subset of S is satisfiable 
(this is equivalent to saying that no formal contradiction can be derived 
from S by the tableau method, 1.e. there exists no finite number of elements 
X,,...,X, such that there is a closed tableau for T(X,AX,A---AX,). 
So the compactness question rephrased is whether a consistent infinite 
set is necessarily satisfiable—in other words, if it is impossible to derive 
a formal contradiction from S, is there necessarily an interpretation in 
which every element of S is true? We shall return to this problem shortly. 


Konig’s Lemma. We first wish to consider a related problem, not 
about formulas of propositional logic, but about trees. Suppose 7 is a 
tree in which every branch is finite. Does it necessarily follow that 7 
contains a branch of maximal length? Stated otherwise, if there exists 
no finite branch of maximal length, must 7 necessarily contain an 
infinite branch? Stated yet another way, if for every finite n, there is at 
least one point of level n, does 7 necessarily contain an infinite branch? 

The answer for trees in general is “no”, but for finitely generated 
trees (i.e. for trees in which each point has only finitely many successors) 
the answer is “yes”. 

A simple example of an infinitely generated tree for which the answer 
is “no” is the following: 


Ao 
a; ° ° ves 7 
Az2 P P 
a33 an3 
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In this tree, ay branches to infinitely many points a,,a,...,a,,... 
Every branch of this tree is finite, yet for each positive integer n, there 
is a branch of length greater than n (the branch going through a,,.,). 

Now KoOnig’s lemma is to the effect that for a finitely generated tree, 
if for each n there is at least one point of level n, then the tree must con- 
tain at least one infinite branch. Let us first observe that for a finitely 
generated tree 7, the statement that for every n there is at least one point 
of level n is equivalent to the statement that 7 has infinitely many points. 
(The first statement obviously implies the second, and conversely if 7 
has infinitely many points, they must be scattered at infinitely many 
levels, since each level of a finitely generated tree contains only finitely 
many points.) We thus shall prove K6nig’s lemma in the following 
equivalent form. 


Konig’s Lemma. Every finitely generated tree J with infinitely many 
points must contain at least one infinite branch. 

Many proofs of K6nig’s lemma exist in the literature. We shall give 
K6nig’s original proof, which is perhaps the shortest. 


Proof. Call a point of 7 good if it has infinitely many descendents 
(i.e. if it dominates infinitely many points) and bad if it has only finitely 
many descendents. By hypothesis there are infinitely many points on 7, 
and they are all dominated by the origin; hence the origin is good. 

We next observe that if all successors of a point are bad, then the 
point must be bad (since by hypothesis it has only finitely many suc- 
cessors). Thus a good point must have at least one good successor. Thus 
the origin ay has a good successor a,, which in turn has a good suc- 
cessor a,, which in turn has a good successor a3, etc. In this way we 
generate an infinite branch (do, d,, a2, ..., A,---)- 


Remarks.(1) For unordered trees, the axiom of choice is needed in 
the above proof, since at each stage we must choose a good successor. 
For ordered trees, the axiom of choice is not needed, since at each stage 
we can always choose the leftmost good successor. 

(2) The crucial place where we used the hypothesis that 7 is finitely 
generated was in the statement that a good point necessarily has a good 
successor. This statement fails in general for infinitely generated trees— 
e.g. in the counterexample we considered a while back, the origin ay is 
good, but each of its successors a,,d),...,a,,... 18 bad. 

The Compactness Problem Resumed. The answer to the compactness 
question is “yes”—.e. if all finite subsets of S are satisfiable, then S is 
satisfiable. 

This theorem shall be basic for our subsequent study of first order 
logic, and it will be profitable to consider several proofs of this result. 
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Roughly speaking, the proofs fall into two main lines. Suppose all finite 
subsets of S are satisfiable. The proofs along the first line show that S 
can then be extended to a Hintikka set, which in turn (by Hintikka’s 
lemma) can be extended to a truth set. In the second type of proof (along 
the lines of Lindenbaum), we extend S directly to a truth set’). 

We now consider a proof along the first line—in this proof we use 
analytic tableaux and KGnig’s lemma. 

Let S be arranged in some denumerable sequence X,, X3,..., X4)+-- 
and suppose that for each n, the set {X,,..., X,} is satisfiable. Run a 
complete analytic tableau for X,. This tableau cannot close since X, 
is satisfiable. Now “tack on” X, to the end of every open branch, and 
continue the tableau to completion. Again we must have at least one 
open branch, for otherwise {X,, X,} would not be satisfiable. So tack 
on X, to the end of each open branch, and continue this process in- 
definitely (successively tacking on X,, X.,, etc.). At no stage can the 
tableau close, for otherwise for some finite n, the set {X,,..., X,} would 
not be satisfiable. We thus obtain an infinite tree. Then by KO6nig’s 
lemma, the tableau contains at least one infinite branch 0, which clearly 
must be open. It is obvious that @ contains all the X,, and the set of 
terms of @ is easily seen to be a Hintikka set. Then by Hintikka’s lemma, 
this set is satisfiable, hence also the subset S. This concludes the proof. 


Discussion. The above construction has shown something about 
tableaux which is of interest on its own account. We have previously 
defined a tableau for a single formula X. Let us now define a tableau 
for a set S (whether finite or infinite) as a tree constructed as follows. 
We begin by placing any element of S at the origin. Then at any stage 
we may extend the tableau by Rule A or Rule B or we may add any 
element of S to the end of any open branch. This completes the defini- 
tion of a tableau for S. Call a point of a tableau fulfilled if it is either of 
degree 0, or it is an « and a,, a, both appear on every open branch 
passing through the point, or it is a B and every open branch passing 
through the point contains either f, or B,. To say that a tableau is 
complete (as defined in Chapter II) is to say that every point is fulfilled. 
Our proof above provided a scheme for constructing a complete tableau 
for any denumerably infinite set S. 

Many such schemes could be given. Here is another one (which in- 
cidentally comes closer to something we shall do in First Order Logic). 
Start the tableau with X,. Then fulfill the origin, and then append X, 
to every open branch. This concludes the first stage. Next fulfill all 


1) The 2 proofs generalize to distinct theorems in a more abstract setting. We plan to 
discuss this and related topics in a sequel to this volume. 
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points of level 2, then append X, to every open branch. This concludes 
the second stage. Then fulfill all points of level 3, append X, to all open 
branches, etc. Obviously every point of this tableau gets fulfilled. 

We now wish to point out that although we used both analytic 
tableaux and K6nig’s lemma in our proof of the compactness theorem, 
neither are really essential, as the following construction will show. 

We employ the following notation. For any set S and formula X, 
by {S, X} we mean SU{X}—.-e. the set whose elements are X and those 
of S. By {S,X, Y} we mean SU{X, Y}—.e. the set whose elements 
are X,Y and those of S. More generally we write {S, X,,...,X,} to 
mean SU{X,,..., X,}. 

We have defined a set to be consistent if all its finite subsets are satis- 
fiable. We say that S is inconsistent if S is not consistent—equivalently, 
if some finite subset of S is unsatisfiable. Obviously any extention 
(superset) of an inconsistent set is inconsistent; any subset of a consistent 
set is consistent. It is almost immediate that consistency satisfies the 
following conditions (for any set S and any a, f). 

C,: No set containing a propositional variable and its negation is 
consistent. 

C,: If {S,«} is consistent, so is {S, a, #2}. 

C,: If {S, B} is consistent, then at least one of the sets {S, B,} or 
{S, B,} is consistent. 

We can equivalently state Cy, C,, C, in the following forms. 

I,: Any set containing a propositional variable and its negation is 
inconsistent (i.e. not consistent). 

I,: If {S, a, a} is inconsistent, so is {S, a}. 

I,: If {S, B,} and {S, B,} are both inconsistent, so is {S, B}. 

Ig is immediate, since for any propositional variable p, the set 
{S, p, ~p} has the unsatisfiable finite subset {p, ~ p}. 

As for I,, suppose {S, «,, a} is inconsistent. Then there must be a 
finite subset S, of S such that {S,,a,,«,} is unsatisfiable (because there 
is a finite subset Sp of {S, «,, «,} which is unsatisfiable, hence {So, o,, a>} 
is unsatisfiable, and we can take S, to be the elements of S, other than 
1,02, so that {S,,a,,a,} is the same as {So, a,,a,} but S, is a subset 
of S). Then {S,,«} is unsatisfiable (because in any interpretation in 
which « is true, %,,, must also be true). Furthermore {S,, «} is a finite 
subset of {S,«} so {S, a} is inconsistent. 

As for I,, suppose {S, B,} and {S, 8,} are both inconsistent. Then 
there must be finite subsets S,,S, of S such that {S,, B,} and {S,, B,} 
are both unsatisfiable. (Cf. second statement in the above proof of J,.) 
Let S, be the union S,US,. Then {S3, B,} and {S3, B,} are both un- 
satisfiable. Hence {S3, 6} is unsatisfiable (why?), but S, is a finite subset 
of S, so {S3, B} is a finite subset {S, 6}. Therefore {S, f} is inconsistent. 
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Remark. Of course Cy, C,, C, are immediate consequences of the 
compactness theorem, since the compactness theorem implies that con- 
sistency is the same as satisfiability (and obviously Cy, C,, C, hold re- 
placing “consistent” by “satisfiable”). But we wish to use Cy, C,, C, to 
give an alternative proof of the compactness theorem. 

We remark that conditions Cy, C,, C, are the only properties of 
consistency which we shall need for our proof. That is to say, given 
any other definition of “consistency” satisfying Cp, C,, C,, it will still 
hold that any S which has this “consistency” property is satisfiable. 
(This fact will be of particular importance later on when we discuss an 
abstract treatment of consistency.) 

Now for the construction. Let S be a consistent set arranged in some 
denumerable sequence X,, X5,..., X,..... We wish to generate an in- 
finite Hintikka sequence 6 whose terms include each X;. At each stage 
of our construction, we will have generated a finite number k >n of 
terms Y,,..., ¥, such that SU{Y,,..., Y,} is consistent, and our next act 
will consist of adding 1, 2, or 3 more terms in such a manner that the 
union of the enlarged set of terms with S is still consistent. Specifically, 
our generation process is given by the following inductive scheme. 

We start the sequence by taking X, as the first term. This concludes 
the first stage. 

Now suppose that we have completed the nth stage, and have at 
hand a finite sequence X,, Y>,..., Y,4; (20), which we will call 6,, such 
that 6, is consistent with S (in the sense that {S, Y,, Y2,..., Y,+;} is 
consistent). Now we look at the nth term Y,, and our next act is as 
follows. 

(a) If Y,, is an «, then we take 6, , , to be the sequence (Y,, Y3,..., Y,4;, 
1, %,, X,4,) (in other words we adjoin both «, and «, and also add the 
element X, 4, from our set S). It follows readily from condition C, that 
6,41 18 again consistent with S. 

(b) If Y, is some B then it follows from C, that either (0,, 81, Xn+4 
(i.e. (Y,, Yo,---. Yasir Br» Xn41)) 18 Consistent with S or (6,, B,, X,+1) 1s 
consistent with S. We let 0,,, be the former, if consistent with S, or the 
latter otherwise. 

(c) If Y, is neither an a nor a f (ie. if it is either a propositional 
variable or its negation), then we merely adjoin X,,, to 6, (le. 6,4, 
=(Y1, Y2,.--5 Matis Xn+1)): 

This concludes the scheme of our construction. Each X, is introduced 
during the nth stage, so every X; appears in @. It is obvious that con- 
ditions H,, H, of a Hintikka set are fulfilled (for each « which appears 
as some nth term of 6,«,,a, are both added to @ at stage n+ 1, and for 
each B which appears as some nth term, either B, or B, 1s added at 
stage n+1). It remains to verify condition H,. Well, since each 6, is 
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consistent with S, then it follows from C, that no propositional variable 
and its negation both occur in 9,. Hence no propositional variable and 
its negation both appear in 8. This concludes the proof. 


Discussion. The above proof nowhere uses KG6nig’s lemma, nor does 
it explicitly appeal to analytic tableaux. However the above construc- 
tion in effect generates the leftmost infinite branch of the complete tab- 
leau for S obtained by the second of our earlier constructions. The point 
is that we can generate this branch without considering the other 
branches at all. 


Exercise. Suppose S is a set such that for any interpretation vp, there 
is always at least one element of S which is true under vg. Show that 
there is a finite subset {X,,...,X,} of S such that the disjunction 
(X,v°''v X,) is a tautology. (Hint: This can be shown as an almost 
immediate consequence of the compactness theorem. It is not necessary 
to duplicate (or rather “dualize”) the construction we made in order to 
prove the compactness theorem.) 


§ 2. Maximal Consistency: Lindenbaum’s Construction 


A set M (of formulas) is called maximally consistent if it is consistent 
and if no proper extension of M is consistent. (By a proper extension 
of a set S we mean a superset of S which contains at least one element 
not in S). Any truth set W is obviously consistent (since it, and hence 
each of its subsets, is satisfiable). And every element outside a truth set 
is false, hence cannot be adjoined to W without destroying consistency. 
So any truth set is maximally consistent. We now wish to show 


Lemma 1. Any maximally consistent set is a truth set. 


Our proof uses the following properties of consistency (which indeed 
are the only properties of consistency which we need): 


Lo: If S is consistent, then every finite subset of S is satisfiable. 

L,: If S is consistent, then for any formula X, at least one of the 
two sets {S, X}, {S, ~X} is consistent. 

Ly is immediate from the definition of consistency. As for L,, suppose 
that {S, X} and {S, ~X} are both inconsistent. Then there is a finite 
subset S, of S such that {S,, X} is unsatisfiable, and there is a finite 
subset S, of S such that {S,, ~X} is unsatisfiable. Let $,=S,US,. 
Then {S;, X} and {S,, ~X} are both unsatisfiable, hence S, is unsatisfi- 
able, but S, is a finite subset of S. Therefore S is inconsistent. 


§ 2. Maximal Consistency: Lindenbaum’s Construction 37 


L, at once implies 

C,: If M is maximally consistent, then for any X either XEM or 
~XeEM. 

Now we turn to the 


Proof of Lemma 1. Let M be maximally consistent. Since M is con- 
sistent, then for any formula X, at least one of X, ~X lies outside M 
(by L,). But by L,, at least one of X, ~ X lies in M. Thus our first con- 
dition (0) of truth sets is satisfied (cf. Chapter II, the section called “truth 
sets revisited”). It remains to show that for any «, a belongs to S iff a,, «, 
both belong to S (for as we pointed out in Chapter II, it then follows 
from (0), (a) that f is in S iff at least one of f,, 6, is in S). Well, suppose 
aeM. Then (~«a,) is not in M (by Lo, since {a, ~a,} is not satisfiable). 
Hence a, € M (by L,). Similarly «,¢M. Conversely suppose «,€M,a,€M. 
Then (~a)¢M (by Lo, since {a;, a, ~a} is not satisfiable). Hence «eM 
(by L,). This concludes the proof. 


Lindenbaum’s Theorem. Every consistent set can be extended to a 
maximally consistent set. 

Before discussing Lindenbaum’s proof, we note that the following 
properties of consistency are trivial. 

F,: A finite set is consistent iff it is satisfiable. 

F,: A (possibly finite) set is consistent iff all its finite subsets are 
consistent. 

F, holds, because if a finite set is consistent, then (by definition) all 
its finite subsets, including itself, are satisfiable. Conversely, if all finite 
subsets of a finite set S are satisfiable, then by definition S is consistent. 
F, then follows immediately from F;. 

A property P of sets is said to be of finite character if for any set S, 
it has the property P iff all finite subsets of S have the property P. Con- 
dition F, thus says that consistency is a property of finite character. 
The fact that consistency is of finite character is actually the only property 
of consistency used in Lindenbaum’s proof. Indeed Lindenbaum’s 
theorem can be looked at as a special case of Tukey’s lemma, which we 
now discuss. 

Consider an arbitrary universe (set) U of objects (maybe finite, 
denumerable or non-denumerable). By “set” let us temporarily understand 
“subset of U”. Consider now a property P of these sets. By a maximal 
set having property P is meant a set S having the property but such 
that no proper extension of S (still within U) has the property. Tukey’s 
lemma says that if P is of finite character then any set having property P 
can be extended to a maximal set having property P. This lemma (for 
arbitrary universe U) is well known to be equivalent to the Axiom of 
Choice. Of course, for a denumerable universe U, the Axiom of Choice is 
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not needed. We shall therefore use what is essentially Lindenbaum’s 
argument and show 


Theorem. ( Tukey’s lemma for the denumerable case). For any denumer- 
able universe U and any property P of subsets of U of finite character 
any set S (of elements of U) having property P can be extended to a 
maximal subset of U having property P. 


Proof. (After Lindenbaum). We first arrange all elements of U (not 
just those of S) in some denumerable sequence Y,, Y;,..., ¥,,.... Now we 
generate a denumerable sequence So,S,,5,,...,5S,,... of sets by the 
following inductive scheme. We set S)=S. Now assume S, has been 
defined. We then determine S, , , as follows. If S,U { Y,.,} has property P, 
we let S,4,=5,U{Y,+1}. If not, then we let S,,,=S,,. 

It is obvious that we have S, © S,¢S,¢::-¢S,¢S,,,¢..., and 
that each S; has property P. We now let M be the union of all the sets 
S,;—.e. an element X of U belongs to M iff X belongs to at least one S;. 
Obviously M is an extension of S,), and we assert that M is a maximal 
set having property P. 

First we must show that M has property P. Well, let K be any finite 
subset of M. Then K, being finite, must be a subset of some S; (why?). 
Since S, has property P and P is of finite character, then K has property P. 
Thus every finite subset K of M has property P, therefore M has pro- 
perty P (since P is of finite character). 

As to maximality, take any Y, such that MU{Y,} has property P. 
We must show that Y, lies in M. Since M U{Y,} has property P, so does 
the subset S;U {Y;} (for any property P of finite character, if a set S has 
the property, so does any subset S’, since all finite subsets of S’ are also 
subsets of S). Then Y,eS;,,,s0 Y; belongs to M. This concludes the proof. 

Exercise. Call a set S complete if every formula or its negation is in S. 
We have already shown that every maximally consistent set is complete. 
Show that any consistent complete set must be maximally consistent 
(and thus a consistent set is maximally consistent if and only if it is 
complete). 


§ 3. An Analytic Modification of Lindenbaum’s Proof 


We proved the compactness theorem in §1 by showing how to 
extend a consistent set S to a Hintikka set. Furthermore, the elements of 
the Hintikka set of the construction were all subformulas of elements 
of S—or at worst negations of such subformulas. In this sense, we say 
that the methods of §1 are analytic. (We use the term “analytic” in a 
way which rather corresponds to the use of the phrase “cut free” in 
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Gentzen’s work; we will subsequently study the relationship quite 
closely.) By contrast, the maximally consistent set M obtained by 
Lindenbaum’s construction contains every formula X or its negation 
(even if neither is a subformula of some element of S). 

Lindenbaum’s construction is rather simpler than the construction 
of § 1, which involves a rather careful scheme for generating the infinite 
Hintikka branch @. We now wish to show how Lindenbaum’s construc- 
tion can be modified along analytic lines (which will have applications 
further on). 

We must first get out of the way a certain detail about subformulas 
and their negations. Define Y to be a direct descendent of X if either X is 
some a and Y is a, or «,, or X is some f and Y 1s f, or P,. And define 
Y to be a descendent of X if there exists a finite sequence beginning with X 
and ending with Y such that each term of the sequence (other than the 
first) is a direct descendent of the preceding term. It is easily verified 
that if Y is a descendent of X, then Y is either a subformula of X or the 
negation of a subformula of X (though it is not in general the case that 
the negation of a subformula of X is a descendent of X—e.g. ~ X is the 
negation of a subformula of X ” Y, but it is not a descendent of X A Y). 
We shall define S° to be the set of all descendents of elements of S. Our 
earlier remark that the constructions of §1 use only subformulas of 
elements of S and their negations can really be sharpened to the fact that 
the constructions use only elements of S°. 

Now suppose S is consistent. Since consistency is of finite character, 
we can extend S to a maximally consistent subset of S°—i.e. to a consistent 
subset of S° such that no proper extension contained within S° is consis- 
tent. Now this maximally consistent subset of S° is in general not a 
truth set. But we show 


Theorem. Every maximally consistent subset of S° is a Hintikka set. 

The proof follows directly from the properties Cy, C,,C, of consistency 
which we used in § 1. Let M be a maximally consistent subset of S°. 
Since M is consistent, then M contains no variable and its negation 
(by Cy). This proves Hy. As to H,, suppose ««€M. Then Mu {al =M, 
so Mu {a} is consistent. Then, by C,,MU{a,} is consistent, hence 
a,€M (by maximality, since «, €S°). Likewise «,¢M. As to H,, suppose 
BeM. Then M=M v §f', and M v {B} is consistent. Then by C,, either 
Mv {B,} or MU {B,} is consistent, so f, (respectively B,) belongs to M 
(again since M is a maximal consistent subset of S° and 8,,f, certainly 
belong to S°). This completes the proof. 

Exercise. There is another proof of the compactness theorem, which 
is well known and probably the simplest of all. (We did not emphasize 
it because the principles involved will not be as useful to us in other 
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contexts as the principles of § 1, § 2). Arrange all the propositional variables 
in a denumerable sequence p,,p>,...,p,,.... Define the sequence 
B,,B,,...,B, of sets by the following inductive scheme. If SU {p,} is 
consistent, let B, = {p,}, otherwise let B, = { ~p,}. Suppose B, is defined. 
Then let B,,,=B,U {p,+1} if SUB,U {p,.,} is consistent, otherwise let 
B,+1=B,U{~Pr+1}. Then let B be the union of B,,B,,...,B,,.... Show 
that there is exactly one interpretation which satisfies B, and that all 
elements of S are true under this interpretation (and hence that S is 
satisfiable). 


§ 4. The Compactness Theorem for Deducibility 


We shall find the compactness theorem particularly useful in the 
following form. We shall say that X is deducible from a set S if there are 
finitely many elements X,,...,X, of S such that the formula 
(X,A---AX,)> X is a tautology. Equivalently, X is deducible from S 
if ~ X is inconsistent with S (or equivalently with some finite subset of S). 


Compactness Theorem. (Second Form). If X is true in all Boolean 
valuations which satisfy S, then X is deducible from S. 


Proof. By hypothesis {S, ~ X} is unsatisfiable. Then by the compact- 
ness theorem, some finite subset Sy of {S,~X} is unsatisfiable. Letting 
X,,...,X, be those elements of Sy other than ~ X (if ~X happens to 
be in Sy), then {X,,...,X,,~X} is unsatisfiable, so (X,A---AX,)> X 
is a tautology. 

Exercise. A set is called deductively closed if every formula which 
is deducible from S lies in S. Prove Tarski’s theorem: A consistent 
deductively closed set is the intersection of all its complete consistent 
extensions (complete in the sense that every formula or its negation 
belongs to the set). 


Part II 


First-Order Logic 


Chapter IV 
First-Order Logic. Preliminaries 
§ 1. Formulas of Quantification Theory 


For first order logic (quantification theory) we shall use the following 
symbols: 

(a) The symbols of propositional logic other than propositional 
variables. 

(b) VW [read “for all” ], 

Jd [read “there exists” ]. 

(c,) A denumerable list of symbols called individual variables. 

(c,) A denumerable list of symbols (not in c,) called individual para- 
meters. 

(d) For each positive integer n, a denumerable list of symbols called 
n-ary predicates, or predicates of degree n. 

The symbols “V” and “J” are respectively called universal and 
existential quantifiers. The term “variable” shall henceforth mean 
individual variable (they should not be confused with the propositional 
variables used earlier). We shall use small letters “x”, “y’, “z” to denote 
arbitrary individual variables. We shall use “a”, “b”, “c” with or without 
subscripts to denote individual parameters (henceforth called just 
“parameters”). We shall use capital letters “P”, “O”, “R”, with or without 
subscripts to denote predicates; their degree will always be clear from 
the context. We shall use the term “individual symbols” collectively for 
(individual) variables and parameters. 

Atomic Formulas. By an atomic formula (of quantification theory) 
we mean an (n+ 1)-tuple Pc,,...,c,, where P is any predicate of degree n 
and c,,...,C, are any individual symbols (variables or parameters). 

Formulas. Starting with the atomic formulas, we build the set of all 
formulas (of quantification theory) by the formation rules of propositional 
logic, together with the rule: 

(1) If A is a formula and x is a variable, then both (Vx) A and (4x) A 
are formulas; these are respectively called the universal quantification 
of A with respect to x and the existential quantification of A with respect 
to x. 

The above recursive definition of “formula” can be made explicit 
as follows: A is a formula iff there is a finite sequence of expressions which 
terminates with A and is such that each term is either an atomic formula 


44 IV. First-Order Logic. Preliminaries 


or is the negation, conjunction, disjunction or conditional of 1 or 2 
earlier terms, or is the existential or universal quantification of some 
earlier term with respect to some variable x. Such a sequence is again 
called a formation sequence for A. 
Pure Formulas. By a pure formula, we mean one with no parameters. 
Degrees. By the degree d(A) of a formula A we mean the number of 
occurrences of logical connectives and quantifiers. Thus 
(1) Every atomic formula is of degree 0. 
(2) d(~A)=d(A)+1 
d(A 0 B)= d(A v B)=d(A> B)=d(A)+d(B) +1 
(3) d((Vx)A)=d(A)+1 
d((4x) A)=d(A)+1 


Substitution. For every formula A, variable x, parameter a, we define 
the formula A* by the following inductive scheme: 
(1) If A is atomic, then A* is the result of substituting a for every 
occurrence of x in A. 
(2) [AAB]S=AzA B: 
[Av B]*= A? v BE 
[A > B|?7= Ax > Bt 
[~A]i= ~[47] 
(3) [(Vx)A]F=(V x) A 
[(4x)A]o=(4x) A 


But for a variable y distinct from x 
[(V x) A]; =(V x)[Al] 
[(4x)A]2=(4x)[47] 


Example. If A is the formula (Vx)Pxv ~(dy)Qxy, then 
Ax = (Wx) Pxv ~(4y)Q(a,y). 

We refer to A* as the result of substituting a for every free occurrence 
of x in A (cf. discussion below). 

By a closed formula or a sentence we mean a formula A such that 
for every variable x and every parameter a, AX =A. [This is equivalent 
to saying, in more usual terms, that no variable has a free occurrence in A 
—cf. following discussion. | 


Discussion. In the way we are treating quantification theory, it is 
not necessary to define the notions of “free occurrences” and “bound 
occurrences”. But to make better contact with the more conventional 
treatments, some remarks are in order. An expression (V x), or (4x) we 
shall call a quantified variable. [It is more usually called a “quantifier”, 
but we prefer the latter term for the symbols V, 4 themselves. | 

In any formula A, by the scope of an occurrence of a quantified 
variable, is meant the smallest formula which follows that occurrence. 
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Examples. Consider the following 3 formulas: 

(a) (Vx)Px)>[(VxX)Oxyv Rx] 

(b) (Vx)[Px > [(Vx)Oxyv Rx] 

(c) (Vx)[Px>(Vx)(QxyARXx)] 

In each of these, there are 2 occurrences of “(Vx)”; let 0, be the first 
(leftmost) one, and 0, be the second occurrence. In (a), the scope of 0, 
is Px. In (c) the scope of 0, is (Px >(Wx)(QxyA Rx)). The scope of 0, 
in both (a) and (b) is Oxy; the scope of 0, in (c) is (Oxy v Rx). 

We define an occurrence of a variable x in a formula A to be bound 
if it is either within the scope of some occurrence of (Vx) or (4x), or 
else is itself immediately preceded by V or Jd. An occurrence of x in A 
is called free if it is not bound. Finally x is said to have a free occurrence 
in A if at least one occurrence of x in A is free. 

In the above examples, x has no free occurrence in either (b) or (c), 
and has only one free occurrence in (a). All occurrences of y in (a), (b), 
(c) are free. 

The semantical significance of the notion of free and bound occurrences 
can be illustrated by the following example: 

Consider the expression 


(1) x=5y. 


The truth or falsity of (1) depends both on a choice of values for x and 
a choice for y. This reflects the purely syntactical fact that x and y each 
have a free occurrence in (1). 

Now consider: 


(2) (Jy) [x=5Sy]. 


The truth or falsity of (2) depends on x, but not on any choice for y. 
Indeed, we could restate (2) in a form in which the variable y does not 
even occur; viz. “x is divisible by 5”. And this reflects the fact that x has 
a free occurrence in (2) but y does not. 

We remark that A* is indeed the result of substituting a for every 
free occurrence of x in A—this can be verified by induction on the 
degree of A. 

We also remark that it is possible to define what it means for x to 
have a free occurrence in A without having to define the notion of 
“occurrence”. Using our substitution operation, we can say that x has a 
free occurrence in A if for some parameter a (or equivalently for every 
parameter a) A* is distinct from A. Without using the substitution 
operation, we can alternatively characterize the notion “x has a free 
occurrence in A” by the following inductive rules: 

(1) x has a free occurrence in an atomic formula Pc,,...,c, iff x is 
identical with one of the symbols c,,..., c,. 
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(2) For each of the binary connectives b, x has a free occurrence 
in AbB iff x has a free occurrence in at least one of A, B. And x has a free 
occurrence in ~ A iff x has a free occurrence in A. 

(3) If y,x are distinct variables then y has a free occurrence in (Vx) A 
{and likewise (4x) A] iff y has a free occurrence in A. And x does not 
have a free occurrence in (V x) A, nor in (4x) A. 

Subformulas and Formation Trees. “Formula” will henceforth mean 
“closed formula”, unless specified to the contrary. The notion of immediate 
subformula (in the sense of quantification theory) is given explicitly by 
the rules: 

(1) A,B are immediate subformulas of A” B, Av B, A> B, and A 
is an immediate subformula of ~ A. 

(2) For any parameter a, variable x, formula A, A% is an immediate 
subformula of (Vx)A and of (4x) A. 

The definition of “subformula” is like that of Chapter I, but con- 
struing “immediate subformula” in the above sense. 

By a formation tree (in the sense of first order logic) is meant a tree 
in which each end point is atomic, and such that for every other point 
one of the following conditions holds: 

(1) It is of the form ADB, and has A, B for its 1st, 2nd successors, 
and it has no other successors, or it is of the form ~ A, and has A for its 
sole successor. 

(2) It is of the form (Vx)A or (4x)A and it has Aj, A?,,..., Az,,... 
as its successors (say as the Ist, 2nd,... nth ... respectively, though the 
order is not of any real significance). 

Since we have denumerably many parameters, formation trees for 
quantification theory are not finitely generated (they involve infinite 
branching) unlike the case for propositional logic. [However, it is 
obvious that all branches are finite—indeed the length of each branch 
is bounded by the degree of the formula at the origin. | 

Again we call 7 a formation tree for A if 7 is a formation tree with A 
at the origin. And again, the subformulas of A are precisely the formulas 
which occur in at least one place of the formation tree for A. 
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Formulas with Constants in U. We let U be any non-empty set. We 
shall call U a universe of individuals—more briefly, a universe or a 
domain. We now wish to define the notions of formulas with constants 
in U—or more briefly “U-formulas”. 

By an atomicU -formula, we shall mean an ordered (n+ 1)-tuple 
Pé,,..., &, (also written Pé,...&,), where P is an n-ary predicate, and 
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each 6@; is either a variable or an element of U. [Note that we do not 
allow any 6; to be a parameter.|] Having defined the atomic U-formulas, 
we can then define the set of all U-formulas by the formation rules given 
in § 1. Thus a U-formula is like a formula with parameters, except that it 
contains elements of U in place of parameters. This includes the “pure” 
formulas—i.e. those with no parameters, and no constants in U—as 
special cases. For any element keU we define the formula F; in exactly 
the same manner as we define F*, where a is a parameter. If F is a U-for- 
mula, so is Fx. We also define the notion of a U-subformula, analogous 
to that of “subformula”, and “formation trees” for U-formulas in again 
an analogous manner [however we do not require any ordering of U, 
formation trees are not required to be ordered trees]. We let EY be the 
set of all closed U-formulas. By a first order valuation v of EY we mean an 
assignment of truth values to all elements of EY such that for every A 
in EY and every variable x, the following conditions hold: 

F,: vis a Boolean valuation of EY 

F,: (a) (Vx)A is true under v iff for every keU, AX is true under v. 

(b) (4x)A is true under v iff for at least one element keU, A; 
is true under v. 

By a first order truth set (with respect to the universe U) we mean a 
subset S of EY which satisfies all the conditions of a truth set as defined 
in propositional logic, as well as the conditions: 

(a) (Vx)-A belongs to S iff for every keU, Ay belongs to S. | 

(b) (4x) A belongs to S iff for at least one k in U, Af belongs to S. 

Again it is immediate that S is a first order truth set iff the characteristic 
function of S is a first order valuation. [By the characteristic function 
of S we mean, of course, relative to EY—1.e., the function which assigns 
t to every element of S and f to every element of EY which is not in S.] 

Atomic Valuations. By an atomic valuation of EY we mean an assign- 
ment of truth values to all atomic elements of EY. If two first order 
valuations agree on all atomic elements of EY’, then they must agree on 
every element of A of EY (this is easily seen by induction on the degree 
of A). Thus an atomic valuation v, of EY can be extended to at most one 
first order valuation v of EY, also vy can always be extended to at least one 
first order valuation v of EY by the following considerations (which are 
obvious analogues of the propositional case). By a valuation tree for A 
(with respect to the universe U) is meant a formation tree for A together 
with an assignment of truth values to all points of 7 such that the truth 
values of each point (other than an end point) is determined from the 
truth values of its successors by the conditions F,, F,. (Cf. definition of a 
first order valuation). One easily shows by induction on the degree of A 
that for any atomic valuation v, there exists exactly one valuation tree 
for A whose end points receive the values given by vg; in this valuation 
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tree, A receives a unique value. We define v(A) to be this value. Thus v 
is a valuation of the entire set EY, and it is easily seen to be a first-order 
valuation. N.B. Unlike the case for propositional logic, valuation trees 
do not provide any effective method for determining the truth value of a 
formula under a given atomic valuation, since (in general) some points 
of the tree have infinitely many successors, so we can not in general 
actually know the truth value of such a point unless we know the truth- 
values of its infinitely many successors. However, even though the 
valuation procedure is non-effective it is mathematically well defined. 
[To formalize the argument would require using a language stronger 
than first order logic; it can be done, e.g. in set theory, or in the language 
known as second-order arithmetic. | 

Interpretations. In propositional logic, we used the term “interpre- 
tation” to mean an atomic valuation. In first order logic, the term “inter- 
pretation” is traditionally used in the following different (but very closely 
related) sense. 

We let E be the set of all pure closed formulas of quantification theory. 
By an interpretation I of E in a universe U is meant a function which 
assigns to each n-ary predicate P an n-place relation P* of elements of U. 
An atomic U-sentence Pé,,...,&, 1s called true under IJ if the n-tuple 
&,,...,€, stands in the relation P*. In this manner, the interpretation J 
induces a unique atomic valuation vy. And we say that an arbitrary 
element of EY (not necessarily atomic) is true under the interpretation [ 
if it is true under the induced atomic valuation vp. 

Conversely, if we start with an atomic valuation vp on a universe U, 
we associate with it that interpretation which defines each P" as the 
set of all n-tuples &,,...,é, such that Pé,,...,&, is true under vp. It is 
obvious that this interpretation J induces v, back again, and is the only 
interpretation which induces vp. 

Thus, there is no essential difference between the points of view of 
interpretations and of atomic valuations, and we shall use whichever 
notion is more convenient at the moment. 

Example. Let U be the domain of natural numbers. Consider the for- 
mula (Vx)(dy)Pxy. It is meaningless to ask whether this formula is 
true or false before we are given an interpretation which tells us what 
P* is. Suppose we interpret P x, y to mean “x is less than y”—1.e., suppose 
we consider any interpretation in which P” is the relation <. Under 
such an interpretation the above formula is clearly true. On the other 
hand, if we interpret P to be the greater than relation, then the formula is 
false. 

We have so far been using the letter “E” to denote the set of formulas 
built from all predicates of quantification theory. We shall sometimes 
consider the case when E 1s rather the set of all formulas built from some 
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subset of the predicates, in which case the definitions of EY, atomic 
valuation of E, first order valuation of EY and interpretation of E in U 
are the same as before (except that we take into consideration only those 
predicates which occur in at least one element of E°). 

Example. Let P be a predicate of degree 1 and Q be a predicate of 
degree 2. Let E be the set of all formulas containing no predicates other 
than P and Q. Let U be the finite universe {1,2,3}. The following is an 
example of an atomic valuation of EY: 


True False 


Pi P2 
P3 Q1,1 
Q12 02,2 
013 03,3 
02,3 Q2,1 

03,1 

03,2 


The truth value of any element of EY is now completely determined 
by the above table (since we have specified which atomic elements are 
true and which are false). We have thus determined a first order valuation 
defined on the entire set EY. 

Alternatively, we could have determined v by the following inter- 
pretation (of the predicates P,Q): 

P: The set {1,3}. 

QO: The set of ordered pairs 

{£1,2),<1,3),<2,3)} 
equivalently the less than relation restricted to U. 

Models. An interpretation I in which every element of a given set S 
is true is sometimes call a model of the set S. 

Validity and Satisfiability. A pure formula A is called valid if it is 
true under every interpretation (in every universe). Equivalently, A is 
valid if for every universe U, A is true under every first order valuation 
of EY. 

A formula A is called (first order) satisfiable if it is true in at least one 
interpretation in at least one universe—equivalently if for at least one 
universe U there is at least one first order valuation in which A is true. 
More generally, a set S of pure formulas is called satisfiable (more 
generally, simultaneously first order satisfiable) if there is at least one 
interpretation in which all elements of S are true. 

One sometimes speaks of validity and satisfiability within a specific 
universe U. A formula is called valid in U if it is true in all interpretations 
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in U, and satisfiable in U if it is true in at least one interpretation in U. 
And a set S is called satisfiable in U if there is at least one interpretation 
in U which satisfies every element of S. 

Thus A is valid iff A is valid in every universe; A is satisfiable iff it is 
satisfiable in at least one universe. 

Léwenheim proved the celebrated result that if A is satisfiable at all, 
then A must be satisfiable in some denumerable domain. Skolem subse- 
quently extended this result, and showed that if a denumerable set S of 
closed formulas is simultaneously satisfiable, then it 1s simultaneously 
satisfiable in a denumerable domain. This result (the so-called “Skolem- 
Lowenheim theorem”) has a profound impact on the foundations of 
mathematics. We shall subsequently consider several proofs of this 
theorem. 

Exercise 1. Show that the validity or satisfiability of a formula in a 
universe U depends only on the cardinality of U. | 

Exercise 2. Show that if a formula is satisfiable in U, then it is satis- 
fiable in any larger domain (i.e. in any superset of U). Show that if A is 
valid in U, then it is valid in any smaller domain (subset of VU). 

Exercise 3. Construct an example of a formula satisfiable in a de- 
numerable universe, but not in any finite universe. 

Exercise 4. Show that A is valid iff A’ is not satisfiable. Show that A is 
satisfiable iff A’ is not valid. 

Sentences with Parameters. We have so far defined validity and 
satisfiability just for pure sentences (sentences with no parameters). 
Consider now a sentence A(a,,..., a,) containing exactly the parameters 
d,,-.-,d,. For any universe U and any elements k,,...,k, of U by 
A(k,,...,k,) we mean the result of simultaneously substituting k, for 
a,,...,k, fora, in A(a,,..., a,). Given an interpretation I of the predicates 
of A(a,,...,a,) in the universe U, we say that A(a,,...,a,) 18 satisfiable 
under I if there exists at least one n-tuple <k,,...,k,> of U such that 
A(k,,...,k,) 1S true under J, and we say that A(a,,...,a,) 1s valid under I 
if for every k,,...,k, of U, A(k,,...,k,) 1s true under J. Then we say A is 
valid (satisfiable) in U if A 1s valid (satisfiable) under all interpretations 
(at least one interpretation) in U. And we say that A(a,,...,a,) is valid 
(satisfiable) if A(a,,..., a,) 18 valid (satisfiable) in all (at least one) universe. 

The definition of simultaneous satisfiability of a set S of sentences 
with parameters should now be obvious. Consider any mapping ¢ from 
the set of parameters of S (i.e. which occur in at least one element of S) 
into a universe U. For any AeS, by A® we mean the result of substituting 
for each parameter a; of A its image ~(a;) under g. Now we say that S is 
(simultaneously) satisfiable in U if there exists an interpretation J of the 
predicates of S and there exists a “substitution” » mapping the parameters 
of S into elements of U such that for any AeS, A® is true under J. 
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Exercise. Let x,,..., x, be variables which do not occur in A(a,,..., a,); 
let A(x,,...,X,) be the result of substituting x, for a,,...,x, for a,. 
Show that A(a,,...,a,) is valid iff the pure sentence (Vx,)---(Vx,) 
A(X1,---,X,) 18 valid, and that A(a,,...,a,) 1s satisfiable iff the pure sen- 
tence (4x,),...,(4x,,) A(X,,...,X,) 1S satisfiable. 
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By a Boolean atom we shall mean a sentence which is not the negation 
of any other sentence nor the conjunction, disjunction or conditional of 
other sentences. Equivalently, a sentence is a Boolean atom iff it 1s either 
an atomic sentence Pa,,...,a, or is of one of the forms (Vx) A or (4x) A. 

Consider now the universe V whose elements are the parameters 
themselves. We can talk about Boolean valuations of EY and also about 
first order valuations of EY; these are not the same thing. Obviously 
every first order valuation of EY is also a Boolean valuation of EY, but a 
Boolean valuation of EY may fail to be a first order valuation of EY. 

All our results about Boolean valuations of propositional logic go 
over almost intact to Boolean valuations in quantification theory. For 
example, any assignment of truth values to all Boolean atoms of EY 
can be extended to one and only one Boolean valuation of EY (but in 
general this Boolean valuation fails to be a first-order valuation). Also 
the following version of the compactness theorem can be proved exactly 
as in propositional logic: If S is an infinite subset of EY such that every 
finite subset of S is truth-functionally satisfiable (i.e. true in at least one 
Boolean valuation of EY) then the whole set S is truth-functionally 
satisfiable. [This can be proved by any of the methods of Chapter III, 
everywhere replacing “propositional variable” by “Boolean atom”. 
There is, however, another compactness theorem for first order logic— 
a much deeper result which we shall subsequently prove—which says 
that if every finite subset of S is first-order satisfiable (i.e. true in at 
least one first order valuation) then S 1s first-order satisfiable. 

We must similarly distinguish valid sentences from tautologies. A 
valid sentence is true under all first-order valuations; a tautology is true 
under all Boolean valuations (even those which are not first order valua- 
tions). For example, the following sentence is not only valid, but even a 
tautology. [(V x) Px A(Vx)Qx]|>(Vx)Px. This sentence is of the form 
(p A q) > p, which is a tautology of propositional logic. 

However, the following sentence, though valid is not a tautology: 


(Vx)[PxaQx]>(Vx)Px. 


Exercise 1. Why is the last sentence not a tautology? 
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Exercise 2. Give an example of a sentence which is truth-functionally 
satisfiable but not first order satisfiable. 


Exercise 3. [Important!| Show that a quantifier-free sentence (i.e. 
a sentence with no quantifiers) which is truth-functionally satisfiable 
must also be first order satisfiable. 

Show therefore that if a quantifier-free sentence is valid, then it must 
be a tautology [this is a semantic version of Hilbert’s first e-theorem ]. 
More generally, show that any S (finite or infinite) of quantifier-free 
sentences which is (simultaneously) truth-functionally satisfiable is also 
(simultaneously) first order satisfiable | Hint: Take any Boolean valuation 
of E_ which satisfies S. This Boolean valuation induces a certain inter- 
pretation I of the predicates of S (in a manner we have discussed earlier). 
Show that every element X of S is true under this interpretation I (use 
induction on the degree of X)]. 


Chapter V 


First-Order Analytic Tableaux 
§ 1. Extension of Our Unified Notation 


We use “a”, “B” exactly as we did for propositional logic (only now 
construing “formula” to mean “closed formula of quantification theory”). 
We now add two more categories y and 6 as follows. 

For the moment let us work with unsigned formulas. Then “y” shall 
denote any formula of one of the two forms (Vx)A, ~(4x)A, and for 
any parameter a, by y(a) we mean Az, ~ A* respectively. 

We use “6” to denote any formula of one of the two forms (4x) A, 
~(Vx)A, and by 6(a) we respectively mean A*, ~(A*). We refer to 
y-formulas as of universal type, and 6-formulas as of existential type. 

In working with signed formulas, y shall be any signed formula of 
one of the forms T(Vx)A, F(4x)A, and y(a) is respectively TA*, F Ax. 
And 6 shall be any signed formula of one of the forms T(4x) A, F(V x) A, 
and 6(a) is respectively TA*, F A*. 

In considering sentences with constants in the universe U, we use y, 
6 in the same manner and for any keU, we define y(k), 5(k) similarly. 

Under any interpretation in a universe U, the following facts clearly 
hold: 

F,: «is true iff «,,a, are both true. 

F,: B is true iff at least one of B,, B, is true. 

F3: y is true iff y(k) is true for every ke U. 

F,: 61s true iff 6(k) is true for at least one ke U. 
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As consequences of the above facts, we have the following laws 
concerning satisfiability, of which G,,G,,G, are immediate and G, 
(which the reader should look at most carefully) we will prove. In these 
laws, S is any set of formulas perhaps with parameters (but no other 
constants), and likewise with a, f, y, 6. And “satisfiable” means first 
order satisfiable. 

G,: If S is satisfiable, and weS, then {S,a,,a,} is satisfiable. 

G,: If S is satisfiable and BeS, then at least one of the two sets 
{S,B,}, {S, B,} is satisfiable. 

G,: If S is satisfiable and yeS, then, for every parameter a, the set 
{S,y(a)} is satisfiable. 

G,: If S is satisfiable and d€S, and if a is any parameter which occurs 
in no element of S, then {S,6(a)} is satisfiable. 

We leave the verification of G,,G,,G3 to the reader; we shall now 
prove the very critical law G,. 

By hypothesis, there is an interpretation I of all predicates of S in 
some universe U and a mapping ¢ of all parameters of S into elements 
of U such that for every AeS, the U-sentence A® is true under J. In 
particular, 6° is true under J. The sentence 6% is a sentence with no 
parameters but with constants in U and it is a sentence of existential 
type, call it 6,. Since 6, is true under J, then (by F,,), there must be at 
least one element k of U such that 6,(k) is true under I. Now @ is defined 
on all parameters of {S,6(a)}, except for the parameter a. We extend ~ 
by defining o(a)=k—call this extension g*. Then g* is defined on all 
parameters of {S,5(a)}. Clearly, for every AcS, A® is the same expression 
as A®, so A®™ is true under J. And [6(a)]” is the same sentence as 6, (k), 
hence [6(a)]” is true under I. Hence, for every Ae{S,6(a)},A® is true 
under I. Thus {S,6(a)} is satisfiable. 
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Whether we work with signed formulas or not, our tableaux rules 
for first order logic are the following four: 


Rule A: * Rule B: p 
Oy B, |B 


9) 


Rule C: a where a 1s any parameter. 


y(a) 


%) , 
Rule D: —, where a is a new parameter. 


6(a)’ 
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Rules A, B are the same as in propositional logic. The new rules C, D 
(for eliminating quantifiers), are direct rules; the only one of the four 
rules which is a branching rule is Rule B. In signed notation, Rules C, D 
are as follows: 


T(Wx)A F(4x)A 


Rule C:: ———— 
ue TAX FA 
T(AxX)A , 
Rule D: =—,» with proviso 
F(Vx)A 
———., with proviso 
F A* 


Using unsigned formulas, our quantificational rules are: 


(Vx)A ~(4dx)A 


Rule C: 
Ay ~Ay 
4x)A 
Rule D: ( ~) , with proviso 


, with proviso 


a 


Discussion concerning Rule D. This rule is a formalization of the 
following informal argument used constantly in mathematics. Suppose 
in the course of an argument we have proved that there exists an element x 
having a certain property P—i.e. we have proved the statement (4x) Px. 
We then say, “let a be such an x” and we write Pa. Of course, we are not 
asserting that P holds for every a, but just for at least one. If we subsequently 
show that for another property Q, there exists an x such that Qx, we 
cannot legitimately say “let a be such an x”, because we have already 
committed the symbol “a” to being the name of some x such that Px 
and we do not know that there is any single x having both the properties P 
and Q. Thus we take a new parameter b, and say “let b be such an x”, 
and we write Q b. This is the reason for the proviso in Rule D. 

Actually we can liberalize Rule D by replacing the clause “providing 
a is new”, by “providing a is new, or else a has not been previously 
introduced by Rule D, and does not occur in 6, and no parameter of 6 
has been previously introduced by Rule D”. Under this liberalization, 
proofs can sometimes be shortened (cf. Example 2 below.) 


§ 2. Analytic Tableaux for Quantification Theory 55 


The idea behind this liberalization is this. Suppose in the course 
of an argument we prove a sentence (V x) Px (which is of type y). Then 
we conclude Pa. We have not really committed “a” to being the name 
of any particular individual; Pa holds for every value of a. So if we 
subsequently prove a sentence (4x)Qx, we can legitimately say, “let a 
be such an x”, and for the same value of a, Pa will also hold. 

The above discussion is but an informal foreshadowing of a precise 
argument showing the consistency of the tableau method for first order 
logic. Actually, if we stick to the strict version of Rule D, the consistency 
is almost immediate from the conditions G,, G,, G3, G, of satisfiability 
which we stated in § 1. 

For suppose @ is a branch of a tableau and that 0 is satisfiable. If we 
extend @ by rule A, C or D then the resulting extension is again satisfi- 
able (by G,, G3, G4, respectively). If we simultaneously extend 6 to 
2 branches 6,, 8, by one application of rule B, then at least one of 0,, 0, 
is again satisfiable (by G,). Thus any immediate extension of a tableau 
which is satisfiable (in the sense that at least one of its branches is satisfi- 
able) is again satisfiable. Therefore (by induction) if the origin of a 
tableau is satisfiable, then at least one branch of the tableau is satisfi- 
able and hence open. Therefore if a tableau closes, then the origin is 
indeed unsatisfiable—stated otherwise, every provable sentence is valid. 

The precise justification of the liberalized version of Rule D is a bit 
more delicate; we shall return to this later. Meanwhile we wish to get 
on with some concrete working familarity with First Order Tableaux. 

Example 1. The following tableau is a proof of the sentence 


(Vx)[Px>Qx]> [(W x) Px 3 (Vx)Ox] 


(1) ~[(Vx)[Px > Ox] > [(Vx)Px >(Vx)Ox]] 

(2) (V x)(Px > Qx) (1) 
(3) ~[(V x) Px > (Vx)Qx] (1) 
(4) (V x) Px (3) 
(5) ~(Vx)Ox (3) 
(6) ~Qa (5) 
(7) Pa (4) 
(8) Pa>Qa (2) 
(9) ~Pa (8) | (10) Qa (8) 

x x 


Example 2. We wish to give 2 different proofs of the sentence 
(dy) [(4x) Px > Py]. The first proof uses the strict form of Rule D, and 
the second (which is shorter) uses the liberalized version of Rule D: 
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Proof 1. (1) F(dy)[(Sx) Px> Py] 
(2) F(4Sx)Px>Pa (1) 
(3) T(4x)Px (2) 
(4) FPa (2) 
(5) TPb (3) 
(6) F(4x)Px>Pb (1) 
(7) FPb 

x 

Proof 2. (1) F(dy) [((Ax)Px > Py] 
(2) F(dax)Px>Pa (1) 
(3) T(4x)Px (2) 
(4) FPa (2) 
(5) TPa (3) 


x 
Exercises. Prove the following formulas: 
(Vy) [(Wx)Px> Py] 
(Vx) Px > (4x) Px 
(dy) [Py > (Wx) Px] 
~ (Ay) Py > [(V y) (8x) Px > Py)] 
(dx)Px >(Ay)Py 
(Vx) [PxvQx]=[(Vx)Pxa(Vx)Qx] 
[(Vx)Px vV(Vx)QOx| > (Vx) [PxvQx] 
(the converse is not valid!) 
(4x)(Px vQ.x)=((4x) Px v (Ax)Q x) 
(dx)(PxAQx) > ((Ax) Px v(4Ax)Qx) 
(the converse is not valid). 
In the next group, C is any closed formula—or at least the variable x 
does not occur free in it: 
(Vx)[PxvC]=[(Vx)PxvC] 
(4x) [Px a C] = [(ax) Px AC] 
(dx)C=C 
(Vx)C=C 
(dx) [C > Px] =[C >(4x)Px] 
(4x) [Px > C] =[(Vx)Px > C] 
(Vx)[C > Px] =[C >(V x) Px] 
(Vx)[Px>C]=[(dx)Px > C] 
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Show (H a K)> L, where 

H=(Vx)(VWy)[Rxy>Ryx] (Ris symmetric) 

K=(Vx) (Vy) (Wz) [(RxyARyz)>Rxz] (Ris transitive) 

L=(Vx)(Vy)[Rxy > Rxx] (R is reflexive on its domain of 

definition). 
For a hard one, try the following exercise (taken from Quine [1]): 

Show (A A B)>C, where 

A=(Vx)[(Fx A Gx) > Hx] >(4x)[Fxa ~Gx] 

B=(Vx) [Fx >Gx]v(Vx) [Fx > Hx] 

C =(Vx)[(Fx A Hx) > Gx] > (4x) [FxnGxa ~Hx] 


§ 3. The Completeness Theorem 


Now we turn to the proof of one of the major results in quantifica- 
tion theory: Every valid sentence is provable by the tableau method. 

This is a form of Gédel’s famous completeness theorem. Actually 
Gédel proved the completeness of a different formalization of Quanti- 
fication Theorey, but we shall later show how the completeness of the 
tableau method implies the completeness of the more conventional for- 
malizations. The completeness proof we now give is along the lines of 
Beth [1] or Hintikka [1 ]—and also Anderson and Belnap [1]. 

Let us first briefly review our completeness proof for tableaux in 
propositional logic, and then see what modifications will suggest them- 
selves. In the case of propositional logic, we reach a completed tableau 
after finitely many stages. Upon completion, every open branch is a 
Hintikka set. And by Hintikka’s lemma, every Hintikka set is truth- 
functionally satisfiable. | 

Our first task is to give an appropriate definition of “Hintikka set” 
for first order logic in which we specify conditions not only on the «’s 
and f’s but also on the y’s and 6’s as well. We shall define Hintikka sets 
for arbitrary universes U of constants. 


Definition. By a Hintikka set (for a universe U) we mean a set S 
(of U-formulas) such that the following conditions hold for every «, B, 
y, din EY: 

H,: No atomic element of E” and its negation (or conjugate, if we 
are working with signed formulas) are both in S. 

H,: If weS, then a,, a, are both in S. 

H,: If BeS, then B,eS or B, 6S. 

H,: If yeS, then for every keU, y(k)eS. 

H,: If 6eS, then for at least one element keU, d(k)eS. 

Now we show 
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Lemma (Hintikka’s lemma for first order logic). Every Hintikka set S 
for a domain U is ( first order) satisfiable—indeed in the domain U. 


Proof. We must find an atomic valuation of EY in which all elements 
of S are true. We do this exactly as we did propositional logic—viz for 
every atomic sentence Pé,,...,&, of EY, give it the value t if TP é,,..., €, 
is an element of S, f if FP¢,,...,¢, 1s an element of S, and either t or f 
at will if neither is an element of S. We must show that each element X 
of S is true under this atomic valuation. Again we do this by induction 
on the degree of X. If X is of degree 0, it is immediate that X is true 
(under this valuation). Now suppose that X is of positive degree and 
that every element of S of lower degree is true. We must show X is true. 
Since X is not of degree 0, then it is either some a, f, y or 0. If it is an 
a or a B, then it is true for exactly the same reasons as in the proof of 
Hintikka’s lemma for propositional logic (viz. if it is an «, then a,, «, are 
both in S, hence both true (by induction hypothesis), hence « is true; 
if it is a B, then at least one of B,, B, is in S, and hence true, so P is 
true). Thus the new cases to consider are y, 6. 

Suppose it is a y. Then, for every keU, y(k)eES (by H;), but every y(k) 
is of lower degree than y, hence true by inductive hypothesis. Hence y 
must be true. 

Suppose it is a 6. Then for at least one ke U, 6(k)eS (by H,). Then 6(k) 
is true by inductive hypothesis, hence 6 is true. 

We next consider how we can use Hintikka’s lemma for our com- 
pleteness proof. In propositional logic, tableaux terminate after finitely 
many steps. But a tableau for first order logic may run on infinitely 
without ever closing. Suppose this should happen. Then we generate 
an infinite tree 7, and by K6nig’s Lemma, 7 contains an infinite branch 0. 
Clearly @ is open, but do the elements of 0 necessarily constitute a 
Hintikka set? The answer is “no” as the following considerations will 
show. 

For any X on a branch 6 of degree > 0, define X to be fulfilled on 0 
if either: (i) X is an a, and a,, «, are both on 0; (ii) X is a B and at least 
one of B,, B, is on 9; (iii) X is a y and for every parameter a, y(a) is on 0; 
(iv) X isa 6 and for at least one parameter a, 6(a) is on 8. Now suppose 7 
is a finite tableau and that a branch contains two y-sentences—call 
them y, and y,. Now suppose we use y, and successively adjoin y,(a,), 
)4(G>),---5¥1(G,),---. for all the parameters a,,q,,...,da,,.....We thus 
generate an infinite branch and we have clearly taken care of fulfilling y,, 
but we have totally neglected y,. Or it is possible to fulfill a y-formula 
on a branch but neglect one or several a, £8, or 6 formulas on the branch. 
Thus there are many ways in which an infinite tableau can be generated 
without all—or even any—open branches being Hintikka sets. The key 
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problem is to find a systematic procedure which will guarantee that 
any tableau constructed according to the procedure is such that if it 
runs on infinitely, every open branch will have to be a Hintikka sequence. 

Many such procedures exist in the literature; the reader should at 
this point try to work out such a procedure for himself before reading 
further. 

The following systematic procedure seems to be as simple and direct 
as any. In this procedure of generating the tree, at each stage certain 
points of the tree are declared to have been “used” (as a practical book- 
keeping device, we can put a check mark to the right of a point of the 
tableau as soon as we have used it). 

Now for a precise description of the procedure. We start the tableau 
by placing the formula (whose satisfiability we are testing) at the origin. 
This concludes the first stage. Now suppose we have concluded the 
nth stage. Then our next act is determined as follows. If the tableau 
already at hand is closed, then we stop. Also, if every non-atomic point 
on every open branch of the tableau at hand has been used, then we 
stop. If neither, then we pick a point X of minimal level (i.e. as high up 
on the tree as possible) which has not yet been used and which appears 
on at least one open branch’), and we extend the tableau at hand as 
follows: we take every open branch @ passing through the point X, and 

1) If X is an a, we extend 6@ to the branch (6, a,, «,). 

2) If X is a B then we simultaneously extend 6 to the 2 branches 
(0, B,) and (0, B.). 

3) If X is a 6 then we take the first parameter a which does not 
appear on the tree and we extend @ to (6, d(a)). 

4) If X is a y (and this 1s the delicate case!), then we take the first 
parameter a such that y(a) does not occur on 0, and we extend @ to 
(6, y(a), y). (In other words we add y(a) as an endpoint to 6 and then 
we repeat an occurrence of y!) 

Having performed acts 1—4 (depending on whether X 1s respectively 
an a, B, y, 6), we then declare the point X to be used, and this concludes 
the stage n+1 of our procedure. 


Discussion. To describe the above procedure more informally, we 
systematically work our way down the tree, automatically fulfilling all 
a, B and 6 formulas which come our way. As to the y-formulas, when 
we use an occurrence of y on a branch @ to subjoin an instance y(a), 
the purpose of repeating an occurrence of y is that we must sooner or 
later come down the branch @ and use this repeated occurrence, from 
which we adjoin another instance y(b) and repeat an occurrence of y 


1) If the reader wishes to make the procedure completely deterministic he can, e. g. 
pick the leftmost such unused point of minimal level. 
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again, which we in turn use again, and so forth. In this way, we are 
certain of fulfilling all y formulas (as well as the «, 8, and 6 formulas). 

Let us now consider the possibility that in systematically constructing 
a tableau, we may, after a finite number of steps, come to a stage in 
which the tableau is not closed, yet every non-atomic point of every 
open branch has been used. Obviously this can happen only if no 
y-formulas occur on any open branch. In this case, it is vacuously true 
that all the y-formulas are fulfilled. Hence in this case (which incidentally 
comes up quite rarely), every open branch is still a Hintikka sequence. 

We should also remark that strictly speaking, the tree generated by 
our procedure is not literally a tableau, since there are no tableau rules 
allowing for arbitrary repetitions of y-formulas (or any other formulas 
for that matter). However it is trivial to verify that if we should sub- 
sequently delete these repetitions, then the resulting tree is indeed a 
tableau. Or to put it another way, if it is possible to close a tableau 
allowing arbitrary repetitions, then we could close the tableau without 
these arbitrary repetitions (for anything subjoined using these repetitions 
could just as well have come from the originals higher up on the tree). 

We shall use the term “systematic tableau”, to mean a tableau con- 
structed by the above systematic procedure. By a finished systematic 
tableau we shall mean a systematic tableau which is either infinite, or 
else finite but cannot be extended further by continuing the systematic 
procedure (in other words, for each open branch, all non-atomic elements 
have already been used). From our discussion above, we have: 


Theorem 1. For any finished systematic tableau, every open branch is 
a Hintikka sequence ( for the denumerable universe V of parameters). 

From Theorem 1 and Hintikka’s lemma for first order logic, we at 
once have: 


Theorem 2. In any finished systematic tableau 7, every open branch 
is simultaneously ( first order) satisfiable. 
Theorem 2 in turn yields: 


Theorem 3. (Completeness Theorem for First Order Tableaux). If X 
is valid, then X is provable—i.e., there exists a closed tableau for FX. 
Indeed, if X is valid, then the systematic tableau for F X must close after 
finitely many steps. 


Proof. Suppose X is valid. Let 7 be the finished systematic tableau 
Starting with F X. If 7 contained an open branch @ then by theorem 2, 
0 would be satisfiable, hence F X, being a term of 0, would be satisfiable, 
contrary to the hypothesis that X is valid. Thus X is provable. 
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Concerning the second statement, by KO6nig’s lemma, a closed in- 
finite tableau is impossible, because if 7 is closed, then every branch 
of 7 is of finite length, hence 7 must be finite. 

Theorem 2 also yields: 


Theorem 4. (Léwenheim’s Theorem). If X is satisfiable at all, then 
X is satisfiable in a denumerable domain. 


Proof. Let 7 bea finished systematic tableau starting with XY. We have 
shown earlier that if 7 were closed, then X could not be satisfiable. 
Hence 7 contains at least one open branch @. Then by theorem 2, there 
is an interpretation in a denumerable domain in which all elements 
of 6—in particular X itself—are true. This concludes our proof. 

Discussion of Systematic Tableaux. In general, systematic tableaux 
may take much longer to close than a tableau constructed using some 
ingenuity. The whole point of considering systematic tableaux is that 
they are bound to close if the origin is unsatisfiable, whereas a tableau 
constructed at random may fail to close even though the origin is un- 
satisfiable. Yet it is still true that if X is unsatisfiable, a cleverly con- 
structed tableau for X will close faster than the systematic tableau. Thus 
if the reader is in a very lazy mood, and if he wished to test the satis- 
fiability of X, he can mechanically run a systematic tableau for X, con- 
fident in the knowledge that if X is unsatisfiable, then the tableau will 
eventually close. On the other hand, if he is in a brighter and more 
creative mood, then he can be alert and seize the first opportunity—or 
indeed plan clever strategies—for closing the tableau quickly, even 
though he disregards the systematic procedure. 

We assume the reader has already worked several of the exercises 
at the end of § 2. It is highly unlikely that any of the tableaux constructed 
therein are systematic. At this point, the reader should really try one 
or two of these exercises using systematic tableaux, and should compare 
the length of the proof with the non-systematic tableau he has already 
constructed. 

The particular systematic procedure we have given is by no means 
the best as a practical proof procedure. The following procedure, though 
a bit more difficult to justify, is better from the viewpoint of getting 
shorter proofs. 

Instead of always using the highest unused point of a given branch, 
do the following: At any given stage first use all the a and 6 points. 
(This clearly must terminate after finitely many steps.) Then use up all 
the B points (and again this must terminate after finitely many steps). 
Then use a y-point of maximal height (i.e., maximal level) in the manner 
indicated in the first procedure. 
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A few working examples will convince the reader of the practical 
superiority of this procedure. Needless to say, it is still capable of many 
further improvements; such a study is a subject in itself known as 
“mechanical theorem proving”. This subject—which is of relatively 
recent origin—investigates proof procedures from the viewpoint of 
speed. These procedures are sometimes programmed on computing 
machines. 

Atomic Closure. As in propositional logic, we call a tableau atomically 
closed if every branch contains some atomic element and its conjugate. 
If we modify our systematic procedure by replacing “closed” by “atom- 
ically closed” and “open” by “atomically open” (meaning “not atom- 
ically closed”), then for any finished tableau constructed by this modified 
procedure, each branch is either atomically closed or is a Hintikka set. 
Thus if X is unsatisfiable then there not only exists a closed tableau 
for X, but even an atomically closed tableau for X. This fact will be 
important later on. 

Again we proved the above fact using a model-theoretic argument. 
But it is equally simple to give a purely systematic proof that any closed 
tableau can be further extended to an atomically closed tableau; viz by 
showing by induction on X that there is an atomically closed tableau 
for any finite set which contains both X and X. Thus any closed branch 
of a tableau can be extended to an atomically closed tableau. Therefore, 
any closed tableau can be extended to an atomically closed tableau. [In 
verifying this last statement, do not overlook what happens with Rule D!] 

Satisfiability in a Finite Domain. Suppose that in constructing a tab- 
leau, we reach a stage in which the tableau is not closed, yet there is at 
least one branch @ whose elements constitute a Hintikka set for the 
finite domain of those parameters which occur in at least one element of 0. 
It is then pointless to continue the tableau further, for by Hintikka’s 
Lemma, the set 0 (and hence in particular the origin) is satisfiable in a 
finite domain. 

Example. We have asserted that the formula [(Vx)Pxv(Vx)Qx] 
>(Vx)[PxvQx] is valid, but that its converse (Vx)[PxvQx] 
> [(V x)Pxv(WVx)Qx] is not valid. In other words the signed formula 
F(Vx)[Px AQx]>[(V x) Px A(V x)Qx] is satisfiable. Let us show this by 
the tableau method. Consider the following tableau: 

(1) F(Wx)(Px v Qx) > ((Wx)Pxv (WV x)Qx) 


(2) T(Wx)(Px v Qx) (1) 
(3) F(Vx)Pxv(Vx)Ox (1) 
(4) F(Wx)Px (3) 
(5) F(Vx)Qx (3) 
(6) F Pa (4) 


(7) FQb (5) 


§ 4. The Skolem-L6wenheim and Compactness Theorems for First-Order Logic 63 


(8) TPavQa (2) 
(9) TPbvQb_ (2) 
(10) TPa (8) (11) TQa (8) 
x (12) TPb (9) (13) TQb (9) 


Xx 


The above tableau has one open branch @. In this branch the a-points 
(1), (3) are both fulfilled; the B-points (8), (9) are both fulfilled; the 6-points 
(4), (5) are both fulfilled; and the y-point (2) is fulfilled for the 2 element 
domain {a,b}. Then the proof of Hintikka’s lemma shows us that all 
elements of 6 are true under the following atomic valuation: 


P a — false 
Pb — true 
Oa — true 
O b — false 


Equivalently, (1) is satisfied by the interpretation in which P is the 
set whose only element is b, and Q is the set whose only element is a. 
The reader can easily verify that all elements of @—in particular (1) 
itself—is true under this finite interpretation. 

We thus see how tableaux can be used not only to show certain 
formulas to be unsatisfiable (or equivalently to show certain formulas 
to be valid), but also can sometimes be used to show certain formulas to 
be satisfiable (when these formulas happen to be satisfiable in a finite 
domain). The real “mystery class” consists of those formulas which are 
neither unsatisfiable nor satisfiable in any finite domain. If we construct 
a tableau—even a systematic one—for any such formula, the tableau 
will run on infinitely, and at no finite stage will we ever know that the 
formula is or is not satisfiable. There are formulas which are satisfiable 
but not in any finite domain (cf. exercise below). However, the demon- 
stration of their satisfiability cannot be accomplished within the frame- 
work of analytic tableaux. 

Exercise: Let H be the conjunction of the following three sentences: 

1) (Wx)(4y)(Rx, y) 
2) ~(4dx)Rx,x 
3) (Vx)(Vy)(Vz2)[(RxyARYy,z) > Rx,z] 

Clearly H is true in the domain of the natural numbers if we interpret 
“R” to be the less than relation. Prove that H is not satisfiable in any 
finite domain. 


§ 4. The Skolem-Lowenheim and Compactness Theorems 
for First-Order Logic 


We have already proved L6wenheim’s theorem that every satisfiable 
formula is satisfiable in a denumerable domain. Our proof rested on 
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the method of systematic tableaux for a single formula. To prove the 
Skolem-Léwenheim theorem (viz. that every simultaneously satisfiable 
denumerable set S is satisfiable in a denumerable domain), we must 
extend our method and consider systematic tableaux for sets S of formulas. 
We shall restrict ourselves for a while to pure sets S—i.e., sets of closed 
formulas with no parameters. First of all, by a (first-order) tableau for S 
we mean a tree constructed as follows. We start by placing any element 
of S at the origin. Then at any stage, we can either use Rule A, B, C, D 
or we may adjoin any element of S to the end of any open branch; the 
elements so adjoined shall sometimes be referred to as the premises of 
the tableau (we might think of the process of constructing a tableau 
for S as a test for whether the assumption of all elements of S as premises 
leads to a contradiction). 

By a complete tableau for S we mean a tableau for S such that every 
open branch is a Hintikka set’) (for the universe K of parameters) and 
also contains all elements of S. (In particular, every closed tableau for S 
is vacuously a complete tableau for S.) 


Theorem 5. For any S, there exists a complete tableau for S. 


Proof. We modify our “systematic” construction of a tableau for a 
single formula as follows. We first arrange S in some denumerable 
sequence X,,X5,...,X,,-... Then we begin by placing X, at the origin. 
This concludes the first stage. Now suppose we have concluded the nth 
stage. Then we proceed exactly as before (i.e., as in the case of a systematic 
tableau for a single formula), but then before we conclude the (n+ 1)th 
stage, we adjoin X,,,, to the end of every open branch. 

This concludes our definition of a systematic tableau for S. It is 
obvious that such a tableau must be a complete tableau for S. 


Remark. If S should be a finite rather than a denumerable set, then, 
of course, we arrange S in a finite sequence X,,..., X, and carry through 
the construction as above through the kth stage, and from then on, 
proceed as in the construction for a single formula. 

We leave the proof of the following to the reader: 


Lemma. If there exists a closed tableau for (a pure) set S, then some 
finite subset of S—to wit, the set of premises of the tableau—is unsatis- 
fiable*). Stated otherwise, if all finite subsets of S are (first order) 
satisfiable, then no tableau for S can close. 


*) When we refer to a branch 6 (which is really a sequence rather than a set) as being a 
Hintikka set, we mean of course, that the set of elements of 6 constitutes a Hintikka set. 

*) We remind the reader that if a tableau is closed, then (by Kénig’s lemma) it must be 
finite and hence its set of premises is finite. 
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We now have all the pieces necessary for the following theorem, which 
simultaneously yields the Skolem-LO6wenheim theorem and the com- 
pactness theorem for first-order logic. 


Theorem 6. If all finite subsets of (a pure) set S are satisfiable then 
the entire set S is simultaneously satisfiable in a denumerable domain. 


Proof. By theorem 5, there exists a complete tableau 7 for S. By 
hypothesis and above lemma, 7 cannot be closed; let 6 be an open 
branch. Then @ is a Hintikka set (for the denumerable universe of 
parameters), and all elements of S are terms of 0. Result then follows by 
Hintikka’s lemma. 

Hintikka’s lemma, together with Theorem 5 also yields: 


Theorem 7. If no tableau for S can close, then S is satisfiable in a 
denumerable domain. 


Chapter VI 
A Unifying Principle 


At this point we wish to discuss a principle which we introduced 
in [2] and which simultaneously yields several of the major results in 
Quantification Theory. The mathematical content of this principle is 
not really very different from that of our last theorem (Theorem 7, 
Chapter V), but it is in a form which makes no reference to the particular 
formal system of tableaux (or to any other specific formal system, for 
that matter). We believe that this is a good point to discuss this principle 
while the tableau method is still fresh in the reader’s mind. We shall 
apply the principle several times in the further course of this study. 


§ 1. Analytic Consistency 


The word “set” shall (in this chapter) mean set of sentences (of Quanti- 
fication Theory). We shall let “I” denote any property of sets which is of 
finite character (which we recall means that a set S has the property I 
iff all finite subsets of S have the property I.) To avoid circumlocution 
(as well as for other reasons which will subsequently become manifest), 
we shall say that a set S is I’-consistent if S has the property I’, and I- 
inconsistent if S does not have the property I. 
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Now we define [ to be an analytic consistency property’) (for first 
order logic) if for every ’-consistent set S, the following conditions hold: 

Ay: S contains no atomic element and its conjugate (or no atomic 
element and its negation, if we are working with unsigned formulas). 

A,: If weS, then {S,a,} and {S,a,} (and hence also {S,a,,a,}) are 
I’-consistent. 

A,: If BeS, then either {S,8,} is ’-consistent or {S,B,} is [’-consis- 
tent. 

A;: If yeS, then {S, y(a)} is P-consistent. 

A,: If deS, then {S,6(a)} is [’-consistent, providing a does not occur 
in S. 

It will sometimes be convenient to use conditions Ayg—A, in the 
following equivalent form: 

Ao: Any set containing an atomic element and its conjugate (negation) 
is T’-inconsistent. 

A',: If {S,«,a,} is -inconsistent, or if {S,«,«,} is P-inconsistent, so is 
{S,a}. 

a If {S,B,$ and {S, B,} are both I-inconsistent, so is {S, B}. 

A: If {S,y, y(a)} is P-inconsistent, so is {S,y}. 

A’,: If {S,d(a)} is P-inconsistent, and if a does not occur in {S,6}, 
then {S,6} is ’-inconsistent. 


Examples. Suppose we define I’(S) to mean that all finite subsets of 
S are satisfiable. It is easily verified that this property I is an analytic 
consistency property. Another important example of an analytic consis- 
tency property I is this: Define S to be [-consistent if no analytic 
tableau for S can close. This is quite trivially an analytic consistency 
property. 

In what follows, we shall let “I” stand for any analytic consistency 
property. Suppose that a set S is I’-consistent, and that 7 is a finite 
tableau containing a branch @ which is I’-consistent with S (by which 
we mean that the union of S with the set of terms of @ is I’-consistent). 
If we extend @ to a branch 6* by an application of Rule A, C or D, then 
6* is again I’-consistent with S (by conditions A,,A3;,A, respectively). 
If we extend @ to 6* by adjoining an element of S (as a premise of the 
tableau), then trivially, 0* is again ['-consistent with S. If we simultane- 
ously extend 6 to two branches 6,,6, by Rule B, then either 6, is I’-consis- 
tent with S or 6, is I-consistent with S (by condition A,). If we extend 
some other branch of 7 (by a tableau rule), then 7 still contains the 
branch @ which is I’-consistent with S. It follows by an obvious induction 


") This differs in minor details from what we called an “abstract consistency property” 
in [2]. The present definition seems to us a slight improvement. 
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that if S is I’-consistent, then at any stage of the construction of a tableau 
for S, we must always have at least one branch @ which is I’-consistent 
with S. Then this branch 6 must certainly be open (by condition Ao). 
We have thus proved 


Lemma 1. For any pure set S, if S is I-consistent (where IT is any 
analytic consistency property) then no tableau for S can close. 


Remark. The lemma for Theorem 6 of the last chapter is a special 
case of the above lemma, taking for I’ the property “all finite subsets are 
satisfiable”. 

The above lemma and Theorem 7 of the last chapter at once yield. 


Theorem I. [A Unifying Principle|. For any pure set S, if S is T- 
consistent (where I is any analytic consistency property), then S is 
simultaneously satisfiable in a denumerable domain. 

Exercise. Prove Theorem I for a set S not necessarily pure but such 
that only finitely many parameters occur in S. 

Let us now call an unsigned sentence X I-provable if the unit set 
{F X} is ’-inconsistent. Theorem I at once yields 


Corollary. If X is valid, then X is I'-provable. 


§ 2. Further Discussion of Analytic Consistency 


We have proved Theorem I using analytic tableaux, yet Theorem I 
is not stated with reference to tableaux. We wish to point out that 
although we need Theorem 7 (Chapter V) to prove Theorem I, both 
Theorem 6 and Theorem 7 of Chapter V can be looked at as special cases 
of Theorem I (the former by defining I(S) to mean that all finite subsets 
of S are satisfiable; the latter by defining ['(S) to mean that no tableau 
for S can close). Thus the Compactness Theorem for First Order Logic, 
the SKOLEM-LOWENHEIM theorem and the Completeness Theorem for 
tableaux can all be looked at as special cases of our Unifying Principle. 
And (as we remarked earlier), we shall subsequently see that several 
other basic results of Quantification Theory can be looked at as special 
cases of this principle. 

In [2] we proved this principle without using analytic tableaux, nor 
did we use K6nig’s lemma (which we used in Chapter V to prove Theorem 
7, which in turn we just used to prove Theorem I). The method we used 
in [2] was to show how a [-consistent set S could be embedded in a 
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Hintikka sequence 0. The sequence @ in question is really the leftmost 
infinite branch of a systematic tableau 7 for S, but it can be generated 
without consideration of the other branches of Y —or without considering 
trees at all. | The situation is highly analogous to what we did in Chapter III. 
We first used tableaux to prove the Compactness theorem for Proposi- 
tional Logic, and then we showed how the essential idea of the construc- 
tion could be carried out without use of tableaux. | 

Here is the construction we used in [2]. We shall now only consider 
the case when S is denumerabie (the construction for a finite S is even 
simpler, and the necessary modification should be obvious to the reader.) 
Suppose S is I’-consistent (and pure). Arrange S in some denumerable 
sequence X,,X ,...,X,,... We take X, as the first term of 0. This 
concluded the first stage of the construction. Now suppose we have 
completed the nth stage, and that we have at hand a finite sequence 6, 
of length =n and that 6, is [-consistent with S. We then look at the nth 
term Y. If it is an a, then we extend 0, to 0,,a,,0,,X,4, (and the resulting 
sequence 6,,,, has at least n+ 1 terms and is I’-consistent with S by A,). 
If Y is a B, then either 0,,8,,X,+, OF 9,,82,X,n+ 1 18S ’-consistent with S 
(by A,), so we let 0,,, be the former, if I’-consistent with S, and the 
latter if otherwise (this really corresponds to going down the leftmost 
I’-consistent branch of the systematic tableau). If Y is of the form 6, then 
we take the first parameter a which is new to 6,, and we extend 6, to 
(0,,,0(a), X ,+1) (which is again I’-consistent with S by A,). If Y is of the 
form y, then we take the first parameter a such that y(a) is not a term of 
6, and we extend 9, to (6,,)(@),), Xn+1) (which is again I’-consistent with 
S by A;). This concludes stage n+1 of the construction. Since each 6, 
is I-consistent with S, it cannot contain any element and its conjugate 
(by A,). Thus the infinite sequence 6 which we generate cannot contain 
any element and its conjugate. The other four properties of the definition 
ofa Hintikka sequence readily follows from the nature of the construction 
of 6. So @ is denumerably satisfiable (by Hintikka’s lemma), and every 
element of S occurs in at least one place in 6. This proves Theorem I. 

We see that the above proof nowhere uses K6nig’s lemma. So since 
Theorems 6 and 7 of Chapter V follow from Theorem I, we now see how 
K6nig’s lemma is a convenience rather than a necessity for their proofs. 

The above proof of the Unifying Principle is strikingly similar to 
our first analytic proof of the Compactness Theorem for Propositional 
Logic given in Chapter III. It is indeed possible to reduce both con- 
structions to a common construction. 

There are other ways to prove the Unifying Principle (and hence also 
the Completeness, Compactness and Skolem-Léwenheim theorems) 
which make no appeal to the rather careful process for generating an 
appropriate Hintikka sequence. We shall study this in Chapter X. 
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For most of the subsequent applications of the Unifying Principle, 
we will be dealing with properties I defined just on finite sets. A property 
I defined just on finite sets will be called an analytic consistency property 
(for finite sets) if conditions Ag—A, hold for all finite sets S (and this 
definition does not require that I’ be of finite character). If I’ is an analytic 
consistency property of finite sets, and if a finite set S is '-consistent, then 
no tableau for S can close, hence S is satisfiable. 


Remarks. There is of course, a corresponding unifying principle for 
propositional logic. Define a property I" of sets of formulas of pro- 
positional logic to be an analytic consistency property (in the sense of 
propositional logic) if conditions Ay, A,,A,, hold. Then it is similarly 
provable that for such a property I’, if a set S has the property I, then S 
is truth-functionally satisfiable. This result simultaneously yields the 
completeness theorem for propositional tableaux and the Compactness 
theorem for propositional logic (why?). It can be used to establish the 
completeness of any of the many well known Hilbert-type axiom systems 
for propositional logic. 

The following exercises anticipate in part, some results of subsequent 
chapters. 


Exercise 1. [A Dual Form of the Unifying Principle]. Let P be a 
property of finite sets S. Call P an analytic provability property if the 
following conditions hold (for every finite set S and every X,«, B,y, 6): 


Bo: {S,X,X} has the property P. 
B,: If {S,B,} has the property P, so does {S,B}; if {S,B,} has the 
property P, so does {S, p}. 


B,: If {S,«,} and {S,«,} both have the property P, so does {S,«}. 

B,: If {S,6(a)} has the property P, so does {S,6}. 

B,: If {S,y(a@)} has the property P and if a does not occur in {S,y} 
then {S,y} has the property P. 


Define a set S to be disjunctively valid if for every interpretation I, 
at least one element of S is true under I. [ Note that S is disjunctively valid 
iff the set S of conjugates of elements of S is unsatisfiable. ] 

(a) Show that disjunctive validity is an analytic provability property. 

(b) Show the following dual form of the Unifying Principle: If P 
is an analytic provability property then every finite set S which is dis- 
junctively valid has the property P 


Exercise 2. [A Symmetric Form of the Unifying Principle |. Consider 
a binary relation + between finite sets—we shall write UF V to mean 
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that the set U stands in the relation | to V. Define | to be a symmetric 
Gentzen relation if the following conditions hold (for every U, V, X, 


a, B, y, 0): 
Co: UXEKV,X 
U,X,XEV 
UFV XX | 


C,: (a) If U,a;+ V then U,at V [i=1,2] 
(b) If UF Vf; then UF V ,B[i=1,2] 
C,: (a) If U,B, FV and U,B,+ V then U, BEV 
(b) If UF Via, and UF V,a, then UF V,a 
C3: (a) If U,y(@tEV then U,yFV 
(b) If UF V,6(a) then UF V,0 
C,: (a) If U,d(a)t V then U,6t V, providing a does not occur in 
U,0,V 
(b) If Ut V,y(a) then Ut V,¥y, providing a does not occur in 
U,V.y 
Now define U}, V to mean that every interpretation which satisfies 
all elements of U also satisfies at least one element of V. 
(a) Show that ky is a symmetric Gentzen relation. 
(b) Show that for any symmetric Gentzen relation | and for any 2 
finite sets U, V if UF, V then UFV. 


Chapter VII 


The Fundamental Theorem of Quantification Theory 


There is one very basic result in Quantification Theory which 
appears to be less widely known and appreciated than it should be. 
It results from the cumulative efforts of such workers as Herbrand, 
Godel, Gentzen, Henkin, Hasenjaeger and Beth. We have referred to 
it in [2] as a form of Herbrand’s theorem, though this is perhaps unfair 
to the other workers mentioned above. This theorem is indeed Herbrand- 
like in that it gives a procedure which associates with every valid formula 
of Quantification theory a formula of propositional logic which is a 
tautology. This theorem easily yields the completeness theorem for the 
more conventional axiomatization of First Order Logic (which we 
study in the next chapter), but it yields far more. The beauty of this 
theorem is that it makes absolutely no reference to any particular formal 
system of logic; it is stated purely in terms of a certain basic relationship 
between first order satisfiability and truth-functional satisfiability. In 
view of all those considerations, we feel justified in referring to this 
theorem as the Fundamental Theorem of Quantification Theory. 
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§ 1. Regular Sets 


In preparation for even the statement of the Fundamental theorem, 
we must first motivate and then define the notion of a regular set. 

In this chapter, we will be working only with unsigned formulas, and 
we construe “y” and “6” accordingly. By a regular (unsigned) formula 
we shall mean a closed formula which is either of the form y > y(a) or 
of the form 6 > 0(a) providing a does not occur in 6. We shall refer to 
regular formulas of the form y > (a) as regular formulas of type C, and 
regular formulas of the form 6 > 6(a) as regular formulas of type D. 


Lemma 1. Let S be a set of sentences (maybe with parameters) which 
is ( first order) satisfiable. Then 

(a) For every parameter a, the set {S,y > y(a)} is satisfiable. 

(b) For any parameter a which occurs neither in 6 nor any element of S, 
the set {S,6 > 6(a)} is satisfiable. 


Proof. Since y > y(a) 1s valid, the proof of (a) is immediate. We turn 
to the proof of (5). 

Suppose {S,6 > d(a)} were unsatisfiable. Then each of the sets 
{S,~6} and {S,6(a)} would be unsatisfiable (because each of the for- 
mulas ~6 and 0(a) implies the formula 6 > 6(a)). But since a does not 
occur in {S,6}, the unsatisfiability of the set {S,6(a)} implies the unsatis- 
fiability of the set {S,6$ (by an argument of the next to last chapter, 
if {S,6} is satisfiable, and a does not occur in {S,6}, then {S,6,6(a)} 
is satisfiable and hence also the subset {S,6}). Thus both the sets {S, ~ 5} 
and {S,6} would be unsatisfiable, hence the set {S} would be unsatis- 
fiable, contrary to hypothesis. 


Discussion. We have proved (6) of Lemma | appealing to a fact proved 
in chapter V. The following alternative proof proceeds directly (and is 
very similar to the proof of the corresponding fact of Chapter V). 

Suppose S is satisfiable. Let J be any interpretation of all predicates 
and parameters of S which satisfies S. Extend J to any interpretation I* 
of the set {S,6} (i.e. assign to the predicates and parameters of 6 which 
do not already occur in S any values whatever). Under I*, 6 has a definite 
truth value, but 6(a) does not (since we have not yet assigned to the 
parameter a any value (in the universe U of the interpretation !*). If 6 
is false under J*, then we can assign any value of U to the parameter a, 
and 6 > 6(a) will then be true. If 6 is true under J*, then for some ke U, 6(k) 
is true under I*, so we take any such k as the value of a, and 6 > 6(a) is 
then true. We have thus extended /* to an interpretation [** of all 
predicates and parameters of {S,6 > d(a)} in which all elements of this 
set are true. Hence {S,6 > d(a)} is satisfiable. 

We shall henceforth use the letter “Q” to denote any y or 6, and by 
Q(a) we respectively mean y(a), 0(a). 
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By a regular sequence we shall mean a finite (possibly empty) sequence 
<0, >0,(a,),0, > Q2(a,),...,0,>9,(a,)> such that every term is 
regular and such that for each i<n, if Q;,, is a 6-formula, then the 
parameter a;,, does not occur in any of the earlier terms Q, > Q,(a,),..., 
Q,> Q,(a;). By a regular set R we shall mean a finite set whose members 
can be arranged in some regular sequence. We can alternatively charac- 
terize a regular set as any finite set constructed according to the follow- 
ing rules: 

Ry: The empty set @ is regular. 

R,: If R is regular, so is {R,y > y(a)}. 

R,: If R is regular, so is {R,6 > 6(a)}, providing a does not occur in 6 
nor in R. 

Since the empty set 1s vacuously satisfiable, the conditions R,, R5, 
and Lemma 1 at once yield (by an obvious induction argument) that every 
regular set is satisfiable—indeed, if S is any satisfiable set of pure sentences 
and if R is regular, then S UR is again satisfiable (for if we successively 
adjoin the elements of R to S, at no stage do we destroy satisfiability (by 
Lemma 1)). We can say something stronger. 

We henceforth shall use “R” always to denote a regular set. We shall 
say that a parameter a occurs critically in R, or that a is a critical para- 
meter of R if there is at least one 6 such that 6 > 0(a) is an element of R. 
Then our induction argument above really yields: 


Theorem 1. If S is satisfiable and if no critical parameter of R occurs 
in S, then RUS is satisfiable. 

By R we shall mean the conjunction of the elements of R (in any 
order and parenthesized in any way). 


Corollary. If R > X is valid, and if no critical parameter of R occurs 
in X, then X is valid. In particular, for any pure sentence X, if R> X is 
valid, so is X. 


Proof. Assume hypothesis. Since R > X is valid, then {R,~ X} is 
unsatisfiable. Hence {~X} is unsatisfiable (by theorem 1, since no 
critical parameter of R occurs in { ~ X}), so X is valid. 


Discussion. Theorem 1, of course, implies that every regular set is 
satisfiable (just take S in Theorem 1 to be the empty set). Actually regular 
sets have a property which is stronger than satisfiability. Let us call a 
set S sound if for every interpretation of the predicates of S in a uni- 
verse U, there exists a choice of values in U for all parameters of S which 
makes all elements of S true. (This notion of soundness is, so to speak, 
intermediate in strength between satisfiability and validity.) Now a 
regular set is not only satisfiable, but even sound. In fact a regular set R 
has even the following stronger property: For every interpretation of all 
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predicates of R and all non-critical parameters of R, there exists a choice 
of values of the critical parameters of R which makes all elements of R true. 
Exercise. Prove the last statement above. 
Quasi-Regular Sequences. We will subsequently need: 


Lemma 2. Suppose R is regular and that a does not occur in 6 and that 
a does not occur critically in R (but it may occur non-critically in R), and 
that furthermore no critical parameter of R occurs in 6. Then {R,6 > 6(a)} 
is regular. 


Proof. It is not immediately obvious that we can adjoin 6 > 6(a) to 
R without destroying regularity (since a might occur in R) but we are 
saved by the other hypothesis. Let R, be the set of elements of R of 
type D and arranged in some regular sequence 6, > 0,(a), ..., 0, > 6,(a,), 
and let R, be the elements of R of type C. By hypothesis, none of the 
parameters a,,...,a, occur in 6, and also each of them is distinct from a 
(since a does not occur critically in R). Therefore, none of the parameters 
a,,..., da, occurs in the formula 6 > 6(a). Hence it follows that the sequence 
<0 > 0(a), 6, > 6,(a,),...,6, > 0,(a4,)> must be regular. Therefore, 
R,U{6> d(a)} is a regular set, hence R,UR,U{6 > d(a)} is regular 
(since all elements of R, are of type C). Thus {R,6 > 6(a)} is regular. 

We now define a quasi-regular sequence as a_ sequence 
0,>90,(a,),...,0, > 9,(a,) of regular formulas such that for each 
i<n, either a;,, does not occur at all in any earlier term 
0,>0,(4,),...,Q; > Q,(a,), or else a;,, occurs non-critically in some 
earlier term but no critical parameter of any earlier term occurs in Q,,, 
(and hence also not in Q;,,(a;,,). By an obvious induction, Lemma 2 
yields: 

Lemma 3, Any quasi-regular sequence can be re-arranged to form a 
regular sequence. Stated otherwise, the set of terms of any quasi-regular 
sequence is a regular set. 


§ 2. The Fundamental Theorem 


We shall first state the following weak form of the fundamental 
theorem. 


Theorem 2. Every valid pure sentence X is truth-functionally implied 
by some regular set R. Stated otherwise, for any valid pure sentence X, 
there exists a regular set R such that R > X is a tautology. 

Theorems 1 and 2 jointly imply that a pure sentence X is valid if and 
only if it is truth-functionally implied by some regular set. This is easily 
seen to be equivalent to the statement that a finite set S of pure sentences 
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is unsatisfiable if and only if there exists a regular set R such that RUS is 
truth-functionally unsatisfiable. 

As we shall later see, theorem 2 is enough to yield the completeness 
theorem for the usual axiomatizations of Quantification theory, but for 
other completeness proofs (which we shall want), we need the full force 
of the fundamental theorem which is as follows. 

Before stating this theorem, we wish to henceforth avoid tiresome 
use of the phrase “subformula or the negation of a subformula of’, and 
so by a weak subformula of X we shall mean a subformula of X or the 
negation of a subformula of X. 


Theorem 2* /The Fundamental Theorem ]. Every pure valid sentence X 
is truth-functionally implied by a regular set R with the additional property 
that for each member Q > Q(a) of R, Q is a weak subformula of X. 

A set R obeying the conclusion of theorem 2* will be called an 
associate of the formula ~X. More generally, for any finite set S of 
sentences, by an associate of S we shall mean a set R satisfying the 
following 4 conditions: 

(1) R is regular. 

(2) For each member Q > Q(a) of R, Q is a weak subformula’ of some 
element of S. 

(3) No critical parameter of R occurs in S. 

(4) RUS is truth-functionally unsatisfiable. 

The fundamental theorem can be equivalently stated thus: Every 
unsatisfiable pure finite set S has an associate. [We also note that if S 
has an associate, then S is unsatisfiable by theorem 1. | 

We shall give several proofs of the fundamental theorem in the 
course of this study. We shall now establish it as a consequence of our 
Unifying Principle. 

Define F'(S) to mean that S has no associate—or put otherwise, call § 
I’-inconsistent if S has an associate. It only remains to verify that this I is 

‘an analytic consistency property. It will be somewhat more convenient 
to use the definition of “analytic consistency property” in the form of the 
conditions Aj — Aj, rather than Ay— A, (cf.§ 1 of the preceding chapter). 
So we verify A,— Aj, reading “S has an associate” for “S is I’-inconsis- 
tent”. 

(0) — If S contains some atomic element and its negation, then S is 
already truth-functionally unsatisfiable, in which case the empty set @ is 
an associate of S. 

(1) — If {S,«,,a,} has an associate R, then R is also an associate of 
{S,a}. 

(2) — Suppose R, is an associate of {S,8,} and R, is an associate of 
{S,B,}. If no critical parameter of R, occurs in R,, then R,UR, is 
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regular and is an associate of {S,f} (verify!). If there are critical para- 
meters a,,...,a, Of R, which also occur in R,, then we take parameters 
b,,...,6, which occur nowhere in R,UR,U{S,fB} and we everywhere 
replace a,,...,a, by b,,...,b, respectively in R,, and let R* be the 
resulting set. Then R*¥ is obviously also an associate of {S,8,} and has 
no critical parameter which occurs in R,. Then R* UR, is an associate of 
{5,B}. 

(3) — If R is an associate of {S,y,(a)} then {R,y > y(a)} is an associate 
of {S,y}. 

To see this, we first note the obvious fact that {R,y > (a)} is regular. 
Secondly, y is a subformula of some element of {S,y} (viz. y) and for 
every Q > Q(b) in R, since Q is a weak subformula of (some element of) 
the set {S,y,y(a)}, then if it is also a weak subformula of +(a), it is also 
a weak subformula of y). Thirdly, no critical parameters of {R,y > y(a)} 
occur in {S,y}, for let a,,...,a, be the critical parameters of R. Since R 
is an associate of {S,,y(a)}, none of a,,...,a, occurs in {S,y,y(a)}, hence 
none of them occurs in {S,y}. But a,,..., a, are the only critical parameters 
of {R,y > y(a)} (because a does not occur critically in R). Thus no critical 
parameter of {R,y > y(a)} occurs in {S,y}. Fourthly, the set {R, y > y(a),S,y} 
must be truth-functionally unsatisfiable, because the conjunction of its 
elements truth-functionally implies that all elements of {R,S,y,y(a)} are 
true, but this latter set is by hypothesis not truth-functionally satisfiable, 
hence the former set is truth-functionally unsatisfiable. 

(4) — Suppose R is an associate of {S,6(a)} and that a does not occur 
in S nor 6, then {R,6 > 0(a)} is an associate of {S,6}. 

To see this, the delicate point to verify is that the set {R,6 > d(a)} 
is actually regular. But this follows from Lemma 2 of §1, since our 
present hypothesis says that a does not occur in 6 nor critically in R 
(since no parameter of {S,6(a)} does) nor does any critical parameter 
of R occur in 6 (because it does not occur in {S,d(a)}, hence also not in 
6(a), and hence also not in 6). Therefore, the hypothesis of Lemma 2 
holds, so {R,6 > 6(a)} is regular. The verification of the remaining 3 
points necessary to show that {R,6 > d(a)} is an associate of {S,6} is 
essentially the same as in (3) (though the one new feature in the veri- 
fication that no critical parameter of {R,6 > d(a)} occurs in {S,6} is 
the fact that a, though a critical parameter of {R,6 > d(a)} does not 
occur in {S,6} by hypothesis). This concludes the proof. 


§ 3. Analytic Tableaux and Regular Sets 


Suppose we have a closed tableaux 7 for a finite set S of pure sen- 
tences. Then S must be unsatisfiable, hence by the Fundamental Theorem, 
S must have an associate R. Now, given the tableaux 7, how can we 
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effectively find such an R? The answer is delightfully simple—just take 
for R the set of all formulas Q > Q(a) such that Q(a) was inferred from 
Q (by Rule C or D) on the tableaux 7! We easily show that this R is an 
associate of S (and without use of the Fundamental Theorem, so we 
also have another proof of the Fundamental Theorem using the Com- 
pleteness theorem for tableaux). 

That R is regular is immediate from the restriction in Rule D. Also, 
for any element Q > Q(a) of R, the formula Q occurs as a point on the 
tableaux 7, hence must be a weak subformula of some element of S. 
Since S contains no parameters, then of course, no critical parameter 
of R occurs in S. It thus remains to show that SU R 1s truth-functionally 
unsatisfiable. We shall do this by showing how to construct a closed 
tableaux .% for the set SUR which uses only the truth-functional rules 
(Rules A and B). 

Before doing this, we pause to discuss a point (which perhaps we 
should have discussed earlier) concerning the use of Modus Ponens 
within tableaux. The rule of modus ponens—a common rule in most 
logical systems—says “From X and X > Y to infer Y”’. Suppose we add 
this to our tableaux rules in the form “given a branch 6 of 7 containing X 
and X > Y as terms, we may adjoin Y as an end point to 0—1.e., we may 
extend @ to 0, Y”. Does this additional rule increase the class of provable 
formulas? The answer is quite trivially “no”, for given a branch @ con- 
taining X and X > Y, since it contains X > Y, then we can (by Rule B) 
simultaneously extend it to the two branches 0, ~ X and 9, Y, but the left 
extended branch 6,~X is immediately closed (since @ contains X), so 
we have, in effect, extended 0 to 0, Y. 

Looked at diagramatically, whereas by modus ponens we do this: 


x 
QO): 
X>Y 
Y 


without modus ponens we do this: 


0| x 
X>Y 
~X|Y 
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Let us now return to the problem of showing RUS to be truth- 
functionally unsatisfiable by constructing the tableau % for RUS 
using only Rules A, B. 

We simply change 7 to 7%, as follows. Whereas in 7 we could freely 
infer Q(a) from Q by a quantificational rule, in 7%, when we have a 
branch @,,Q0,8, and we wish to infer Q(a), we first adjoin Q > Q(a) (as a 
premise of the tableau, since it occurs in R and hence in RUS) and 
then infer Q(a) by modus ponens. Looked at diagrammatically, in 7 we 
have the following: ; 

of 

Q(a) [by Rule C or D] 
We alter this in .7) as follows: 

of 0 


0 > (a) 
O(a) 


Or more completely (without use of Modus Ponens): 
oh 6 
QO > Q(a) [element of R] 


~Q | Qa) 
x 


Thus the set RUS is truth-functionally unsatisfiable. 

If X is a valid pure sentence and if R is an associate of {~ X}, let us 
refer to the tautology R =X asan associated tautology of X. It is instruc- 
tive and often curious to see what the associated tautology looks like. 
We have just given a procedure whereby we can find an associated 
tautology for X given a closed tableau for {~ X}. Let us consider an 
example. The formula (4x)[Px vQx]|=>[(4x) Px v (Ax)Qx]—which we 
will call A—is valid; the following is a closed tableau for its negation: 

(1) ~[(4x)(Px v Ox) > (Ax) Px v (Ax) Ox) 
(2) (4x)(Px v Qx) (1) 
(3) ~((ax)Pxv(4x)Qx) (1) 


(4) ~(4x)Px (3) 
(5) ~(dx)Qx (3) 
(6) PavQa (2) 
(7) ~Pa (4) 
(8) ~Qa (5) 


(9) Pa (6) | (10) Qa (6) 
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We have used the quantification rules (C&D) to infer (6) from (2), 
(7) from (4) and (8) from (5). Accordingly, our derived R is the set: 


(2) > (6) 
(4) > (7) 
(5) > (8) 


| =aures~P “ee 
R= 


that is, 
~(dx)Px> ~Pa 
~(4x)Qx> ~Qa 
According to our theory, it should truth functionally imply 
A=(4x)(Px Vv Qx) > ((Ax) Px v (Ax) Qx). 


To see this more perspicuously, let us abbreviate all Boolean atoms 
involved by propositional variables. We let 


Py =(4x)(Pxv Qx) 


p,=Pa 
p3=Qa 
P4= (4x) Px 
ps=(4x)Qx 


then we have 


D1 > (P2 V Ps) 
R= ~D4> ~P2 

~Ps-— ~P3 
A=Pp,; > (P4V Ps). 


Without even knowing what “p,”,..., “ps” stand for, the reader can 
see that R > A is a tautology. 


§ 4. The Liberalized Rule D 


Now we are in a good position to justify the soundness of the liberalized 
version of Rule D for tableaux. We shall refer to this liberalized rule as 
Rule D*, and we recall that it says “from 6 we may infer 6(a) providing 
that either a is new, or else the following 3 conditions all hold: (1) a does 
not occur in 6; (2) a has not been previously introduced by Rule D*; 
(3) no parameter which has been previously introduced by Rule D* 
occurs in 0”. 

Suppose 7 is a tableaux for S. Again let R be the set of all formulas 
QO > Q(a) such that Q(a) was inferred from Q on the tableaux 7, and 
let R be the sequence <Q, > Q,(a,),...,.0,>0Q,(a,)> of elements of R 
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arranged in the order in which the rules C and D were applied in the 
tableaux (i.e. in ZY we first inferred Q,(a,) from Q,,Q,(a,) from 
Q,,...,Q,(a,) from Q,,). Now if 7 was constructed using the strict Rule D, 
then not only is the set R regular, but the sequence R is a regular sequence. 
If, however, 7 was constructed using the liberalized Rule D*, then the 
sequence R is not necessarily regular, but it must be quasi-regular. There- 
fore the set R is still a regular set (by Lemma 3). Furthermore RUS is 
truth-functionally unsatisfiable (by the same argument we used for 
tableaux constructed according to the strict Rule D—i.e., we can construct 
a closed tableau for RUS using only Rules A, B). If now S is a pure set 
then S is unsatisfiable (by theorem 1). 

Let us call a tableau 7 constructed using Rule D* a liberalized 
tableau and let us refer to those parameters of Z which were introduced 
by Rule D* as the critical parameters of 7 —we also say that they occur 
or were introduced critically in 7. 

We have so far considered only tableaux for pure sets S. However, 
our above argument shows the following (where now S may contain 
parameters). 


Theorem. (a) [f there exists a closed liberalized tableau for S, and 
if no parameter of S was introduced critically in the tableau, then S is 
unsatisfiable. 

(b) — If X is provable by a liberalized tableau, and if no parameter 
of X occurs critically in the tableau, then X is valid. 


Chapter VIII 


Axiom Systems for Quantification Theory 


We now wish to show how we can use our earlier completeness results 
to establish the completeness of the more usual formalizations of First 
Order Logic. We first consider an axiom system Q, which (except for 
rather minor details) is a standard axiom system. Its completeness is 
easily obtained as a consequence of our Unifying Principle. We prefer, 
however, to emphasize a completeness proof along the following lines. 
We consider a succession of axiom systems, starting with Q, and ending 
with a system Q¥ each of which seems ostensibly weaker than the preced- 
ing. The completeness of Q3 easily implies the completeness of Q,, but 
it is not immediately obvious that everything provable in Q, is provable 
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in Q%. However, the completeness of Q# is an almost immediate con- 
sequence of the (strong form) of the Fundamental Theorem. The argu- 
ments of this chapter are wholly constructive. We give an effective 
procedure whereby given any associate of {~X}, a proof of X can be 
found in Q¥ (and hence also in Q,). We also know from the preceding 
chapter how given a closed tableau for {~ X}, we can find an associate of 
{~ X}. Combining these two constructions, we see how given any proof 
of X by the tableau method, we can find a proof of X in each of the axiom 
systems of this chapter. 


§ 0. Foreword on Axiom Systems 


By an axiom system .v is meant a domain D of elements called formal 
objects together with a subset A of D whose elements are called the axioms 
of the system together with a set of relations (of elements of D) called 
rules of inference or inference rules. If R is an inference rule and if 
R(X,,...,X,, Y) holds, then we say that (X,,...,X,, Y> 1s an application 
of the rule R, and that Y is a direct consequence of X,,...,X, under R, 
or that Y is directly derivable from X,,...,X, under R. In any application 
<X1,-..,Xn, Y> of R, the elements X,,...,X, are called the premises of 
the application and Y is called the conclusion of the application. By a 
proof in is meant a finite sequence X,,...,X, such that each term X;, 
is either an axiom of. or is directly derivable from one or more earlier 
terms of the sequence under one of the inference rules of .% A proof 
X,,.-.,X, in @ is also called a proof of its last term X,,, and finally an 
element X is called provable in. or a theorem of. if there exists a proof 
of X ina, 

In the so-called Hilbert-type axiom systems for propositional logic 
(quantification theory) the formal objects are formulas of propositional 
logic (respectively quantification theory.) In this chapter we consider 
only Hilbert-type systems. [In chapter XI we shall consider the so-called 
Gentzen-type systems in which the formal objects are of a slightly more 
complex nature. | 


Following Kleene [1] we use the term “postulate” collectively for 
axioms and inference rules. We do not require that the set of axioms be 
finite. One sometimes displays an infinite set of axioms by means of a 
so-called axiom scheme which specifies the set of all expressions of such 
and such form. [ An example of a typical axiom scheme for propositional 
logic is the set of all formulas of the form (X A Y) > X. An example of 
an axiom scheme for quantification theory—one which we will use in 
our system Q,—is the set of all sentences of the form (V x) X > X%.] 
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Inference rules being usually displayed in the form of a figure in which 
a horizontal line is drawn, the premises are written above the line and 
the conclusion below the line. For example, the rule of modus ponens is 
displayed thus: 
XX DY 
Y 


It is read “Y is directly derivable from the two premises X,X > Y” or 
“from X,X > Y”. 

Many axiom systems for propositional logic exist in the literature in 
which modus ponens is the only rule of inference. In the older axiomatic 
treatments of quantification theory, it was customary to give axioms for 
propositional logic in addition to axioms for the quantifiers. In more 
modern versions, one simply takes all tautologies as axioms (in addition 
to the quantificational axiom). This is the course we shall adopt, since an 
axiomatic analysis of logic (along Hilbert-type lines) at the propositional 
level is not needed for any purposes considered in this study. [ Later, 
though, we will consider Gentzen-type axiom systems at the propositional 
level, and these will be use ful.] 


§ 1. The System Q, 


In displaying the axiom schemata and inference rules of this system, 
we shall use the following notation: @(x) is to be any formula which has 
no free variable other than x, and @(a) is to be the result of substituting 
the parameter a for every free occurrence of x in ~(x). 


Axiom Schemata: I. All closed tautologies 


IT. (Vx) p(x) > ea), pla) > (Ax) p(x) 


X XDY 
Inference Rules: I. (Modus Ponens) 
II. (Generalization Rules) 
X > ea) p(a)>X 


X 3 (Vx) p(x) (Ax) p(x) > X 


providing a does not occur in X nor in @(x). 


Remarks. The reader might find it of interest to compare the system 
Q, with say the systems given in Church [1] or Kleene [1]. To the 
reader familiar with these systems, we wish to point out that in our 
version Q,, we have arranged matters so that we completely avoid the 
bothersome trouble of collision of quantifiers. Roughly speaking, we 
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have done this by weakening Axiom Scheme II and strengthening the 
Generalization Rules. 

Exercise 1. Show that the above generalization rules preserve validity 
—i.e. if X > ~(a) is valid then X >(V x) Q(x) is valid, and if g(a)>X is 
valid, then (4x) g(x) > X is valid. It is, of course, obvious that all axioms 
of Q, are valid, and that modus ponens preserves validity—.e. if X and 
X > Y are both valid, then Y is valid. Show therefore that the system Q, 
is correct in the sense that everything provable in Q, is actually valid. 
Show that Q, is consistent in the sense that no formula and its negation 
are both provable in Q,. 

Exercise 2. Give the following finitary proof of the consistency of 
Q,: Show that all axioms of Q, are valid in a 1-element domain, and that 
the inference rules all preserve validity in a 1-element domain. Show 
therefore, that every theorem of Q, 1s valid in a 1-element domain. Show 
therefore that Q, is consistent. 

Before proceeding further we wish to point out that any axiom 
system which contains all tautologies as axioms and which has modus 
ponens as one of its inference rules, must be closed under truth-functional 
implication—i.e. if X,,..., X, are provable in the system and if Y is truth- 
functionally implied by {X,,..., X,}, then Y is provable in the system. 
For suppose the system does contain all tautologies as axioms (or for 
that matter, all tautologies as theorems) and that the system has modus 
ponens as an inference rule (or for that matter, we only require that the 
systems be closed under modus ponens—1.e., for every X and Y, if X, 
X > Y are both theorems, so is Y). Now suppose that X,,..., X, are 
theorems of the system and that Y is truth-functionally implied by 
{X,,...,X,}. Then X, >(X,>(--->(X, > Y)...) is a tautology, hence 
is a theorem of the system. Since this and X, are both theorems, so is 
X,>(--->(X, > Y)...) (by closure under modus ponens). Since this and 
X, are both theorems, so is X3; >(--->(X, > Y)...). After n rounds of 
this reasoning, we see that Y must be a theorem of the system. Let us 
record this fact as 


Lemma 1. Any axiom system which contains all tautologies as theorems 
and which is closed under modus ponens must be closed under truth- 
functional implication. 

We next wish to consider a trivial variant Q', of Q, which enables us 
to handle the quantifiers in the unified “y,6” manner. To obtain Q4 we 
replace the right half of Axiom Scheme II (viz. g(a)>4x@(x) by 
~(4dx)@(x) > ~ (a), and we replace the left half of the Generalization 
Rule (viz: “from X > g(a) to infer X > (V x) p(x) (with proviso)” by “from 
~@g(a)> X to infer ~(Vx)g(x)>X (with same proviso)”. Thus the 
postulates of Q' are as follows: | 
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I’: All closed tautologies 
II’: Modus Ponens 


II: (Vx)e(x)> (a) ~(Ax)e(%)> ~ ea) 


IV’: ~ o(a) 5D X ~(a) > X 
"~(Vx)o(x)>X (Ax)o(x) > X 


(with proviso) 


We can now rewrite III’ and IV’ in unified notation as follows: 


Ill’: y> y(a) 
IV’: “> 2 , providing a does not occur in 6 nor in X. 


We leave to the reader the trivial verification (using Lemma 1) that 
the systems Q,, Q', are equivalent (in the sense that a formula is provable 
in the one system iff it is provable in the other). 

Next we consider a variant Q' of Q', which allows a certain useful 
symmetry. The postulates of Q' are: 

I’: All closed tautologies 
II”: Modus Ponens 
y(a) > X 
yoX 
,, (a) > X 

es a 

Thus the only axioms of Q', are the closed tautologies —the other 
postulates are all inference rules. The sole difference between Q‘, and 

is that Q{ contains the inference rule III, in place of the axiom scheme 
III’ of the system Q}. 

The equivalence of the systems Q’, and Q’ 1s easily seen as follows. 
First of all y(a) > (y > y(a)) is a tautology, hence is a theorem (indeed an 
axiom) of Q{. Therefore by III’, (taking y > (a) for X), y > (y > y(a)) isa 
theorem of Q/. But y > y(a) is truth-functionally implied by y > (y > y(a)), 
hence y > y(a) is a theorem of Q4 (by Lemma 1). From this it is immediate 
that everything provable in Q‘, is provable in Q/. 

To show that everything provable in Q{ is provable in Q',, we need 
merely show that Rule III, is derivable in Q’, in the sense that in any 
application of the rule, if the premise is provable in Q{,, so is the conclusion. 
Thus we must show that if y(a)> X is provable in Q}, so is y> X. So 
suppose y(a)>X is provable in Q;. Obviously y=>y(a) is also prova- 
ble in Q; (it is an axiom). Hence y> X 1s provable in Q, by Lemma 1, 
since y>X is truth-functionally implied by {y>y(a), y(a)> X}. We 
thus see that the systems Q,, 0}, Q; are quite trivially equivalent. 


IIT": 


providing a does not occur in 6 nor in X. 
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It will be convenient to unite rules III) and IIT} as follows: 


III”: ae , where Q is of type D and a does not occur in Q > X, 
or Q 1s of type C. 


§ 2. The Systems Q,, 03 


We now turn to a system which in some ways is more interesting. 
The postulates of Q, are as follows: 


A,: All closed tautologies 


[yry@]>Xx 
By: > ae 
[62> d6(a)] > xX 
rs a 


We emphasize that modus ponens is not an inference rule of 0,— 
indeed both rules B,, B, are one-premise rules. Thus it is not immediately 
obvious that the set of theorems of Q, is closed under truth-functional 
implication. 

It will be convenient to rewrite our postulates as follows: 


, providing a does not occur in 6 nor in X. 


A: All closed tautologies 


p. L22 Q(a)|>x 


X , providing Q is of type D and a does not occur 


in Q nor X, or Q is of type C. 


Theorem 1. Everything provable in Q, is provable in Q¢ (and hence 
also in Q’, and in Q,). 


Proof. It suffices to show that B is a derived rule of Q{— i.e. that in 
any application, if the premise is provable in Q4, so is the conclusion. 
So suppose that [Q > Q(a)] > X is provable in Q{ and that the proviso 
of Rule B holds. Then the proviso of Rule III” of Q{ also holds. Since 
[Q > Q(a)| > X is provable in Q{, so are both ~Q > X, Q(a) > X (by 
Lemma 1). Since Q(a) > X is provable in Q', and a does not occur in Q 
nor in X if Q is of type D, then Q > X is provable in Q’ (by Rule III”). 
Thus ~Q > X and Q > X are both provable in Q{, hence (by Lemma 1) 
X is provable in Q). This concludes the proof. 

Next we consider the system Q; whose postulates are as follows: 


A*: Same as A. 


B*: Like B with the additional proviso that Q be a weak subformula 
of X. 
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Of course Q> is immediately a subsystem of Q, in the strong sense 
that any proof in Q) is already a proof in Q,. 


Theorem 2. Given an associate of ~X, a proof of X in Q3 can be 


found. 


Proof. Let R be an associate of ~ X. If R is empty, then X is a tauto- 
logy, hence we immediately have a proof of X in Q>. If R is non-empty, 
then we arrange R in an inverse regular sequence Y,,..., Y,, (i.e. each Y, 
is of the form Q; > Q,(a,), where Q; is a weak subformula of X and, if of 
type D, then a; does not occur in any of Y,,,,...,Y,,X). Also 
Y, >(Y,>:°::2(Y,> X)...) is a tautology, hence is a theorem (indeed an 
axiom) of Q3. Then by our sole inference rule of Q3, Y, >-:->(Y, > X)...) 
is a theorem of Q3. If n>1, then another application of the inference 
rule (B) gives a proof of Y; >(--->(Y¥,> X)...). In this manner we suc- 
cessively eliminate Y,,...,¥, and obtain a proof of X. In other words, 
the following sequence of lines is a proof of X in Q;: 


¥, > (% > +> (¥%, > X)...) 
Y, >(--- > (Y,> X)...) 


Y,> X 
xX 
This concludes the proof. 


Now Theorem 2 and the Fundamental Theorem of Quantification 
Theorem at once yields. 


Theorem 3. (A strong completeness theorem). Every valid sentence is 
provable in Q3. 

Now by Theorems 1 and 3 (and the fact that Q5 is a subsystem of Q,) 
we have 


Theorem 4. (Gédel’s Completeness Theorem)'). Every valid sentence is 
provable in Q,. 


Discussion. The completeness of Q; is a better result than the com- 
pleteness of Q ,—1t is closely related to the work of Herbrand. The system 
Q> has a feature reminiscent of Gentzen’s Extended Hauptsatz (which 
we shall subsequently study)—-viz. that any sentence provable in Q5 can 
be proved by first using truth-functional rules and then quantificational 
ones. (Indeed this is the only way a sentence can be proved in this particular 
system Q>!) 


') Proved by Gédel for a slightly different system than Q,. 
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There is a way of modifying the system Q5, which preserves the above 
mentioned feature, and has the additional feature that every proof uses 
only weak subformulas of the sentence to be proved. This can be done 
as follows. For any Q of the form (V x) X, (4x) X, define Q to be ~(Vx)X, 
~(4x)X respectively. And for any Q of the form ~(Vx)X, ~(4x)X, de- 
fine O to be (WV x).X, (4x)X respectively. Now let QF be Q3 with rule B 
replaced by the following (2-premise) rule: 

Q>X Qla)>X 


Y , providing Q is a weak subformula of X, and 


that if Q is of the 6-type, then a does 
not occur in Q nor X. 

The reader should find it a profitable exercise to prove the complete- 
ness of Q5". The reader is also urged to look at the following exercises: 

Exercise 1. Define a finite set {X,,..., X,,} to be refutable or inconsist- 
ent in Q,(Q',,Q') if the sentence ~(...(X,AX,)A °°: A X,) is provable 
in Q,(Q;,Q1). Establish the completeness of Q,(Q4,Q/) as a corollary 
of the Unifying Principle (Chapter VI) by showing directly that consist- 
ency in Q,(Q',,Q/) is an analytic consistency property (for finite sets). 

Exercise 2. Modify the above argument to give an alternative (and 
possibly more direct) process for translating a proof by analytic tableaux 
to a proof in Q0,(Q',,Q'). More specifically, call a tableau 7 (for unsigned 
formulas) refutable in Q,(Q‘,,Q7) if (the set of elements of) each branch 
of 7 is refutable in Q,(Q4,Q/;). Obviously a closed tableau is refutable 
in Q, (why?). Now suppose 7’ is an immediate extension of 7 (by one 
application of Rule A, B, C, or D}—show how a refutation of 7” in 
Q0,(Q',,Q') leads to a refutation of 7 in Q,(Q4,Q'). Then by induction, 
show the origin of any closed tableau can be refuted in Q,(Q4,0'). 


Chapter IX 
Magic Sets 


There is another approach to the Completeness, Compactness and 
Skolem-Loéwenheim theorems along very different lines which is most 
striking in its simplicity. It is an outgrowth of the completeness proofs of 
Henkin and Hasenjaeger and we shall study its relation to those 
methods in the next chapter. There are certain key sets involved which 
have almost “magical” properties, and which we accordingly call magic 
sets.') [They are closely related to the methods of Hilbert’s ¢-calculus. | 


1) The use of the term “magic” in mathematics is not totally new; one speaks, e. g. of 
“magic squares”. 
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§ 1. Magic Sets 


In this chapter we will be working exclusively with unsigned formulas. 
Also Boolean valuations and First Order valuations will always be 
understood as referring to valuations of the set E” of all closed formulas 
using only denumerably many parameters. 


Definition. By a magic set we shall mean a set M of sentences with 
(or without) parameters such that: 

M,: Every Boolean valuation satisfying M is also a First Order 
valuation. 

M,: For any finite set Sy of pure sentences and for every finite subset 
M, of M, if So 1s (first-order) satisfiable, then so is S)UMo. 

The first surprising fact about magic sets is that they exist (which we 
will subsequently show). One importance of magic sets emerges from 
the following considerations. 

We shall say that a formula X is truth-functionally deducible from a 
set S if there exists a finite subset S, of S such that X is truth-functionally 
implied by S, (or stated otherwise, that the formula S, > X is a tautology). 
We shall say that a set B constitutes a truth-functional basis for Quanti- 
fication Theory if for every pure sentence X, X is valid if and only if X is 
truth-functionally deducible from B. Now our first theorem is 


Theorem 1. Every magic set M is a truth-functional basis for Quanti- 
fication Theory. 


Proof. Let M be a magic set. 

(a) Suppose X is valid. We assert that X must be true in all Boolean 
valuations which satisfy M. For consider any Boolean valuation v which 
satisfies M. Then v is also a First Order valuation (by M,). Hence X 
must be true under v (because a valid formula, by definition, is true under 
all First Order valuations). 

Thus X is indeed true under all Boolean valuations which satisfy M. 
Then by the Compactness theorem for propositional logic (in the second 
form for deducibility—cf. § 4 of Chapter III), X must be truth-functionally 
deducible from M. 

(b) Conversely suppose X is truth-functionally deducible from M, 
and that X has no parameters. Then X is truth-functionally implied by 
some finite subset M, of M, hence the set M,U{~X} is not truth- 
functionally satisfiable. A fortiori, Mj>U{~X} is not first order satis- 
fiable (why?). Then { ~ X} fails to be first-order satisfiable (because if it 
were, then MyU{~X} would also be, by property M,), which means 
that X is valid. This concludes the proof. 
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Remarks. Part (a) of the proof nowhere used the fact that X is pure, 
and indeed it is the case that every valid sentence—even with para- 
meters—is truth-functionally deducible from M. 

Next we turn to the proof of the existence of magic sets. We shall 
now define an infinite set (of regular formulas) to be regular if every 
finite subset is regular. Now we shall show: 


Theorem 2. There exists a regular magic set M. 
Before proving Theorem 2, we wish to explicitly note: 


Lemma 1. Let v be a Boolean valuation with the following 2 properties 
(for every y, 0): 

(1) If y is true under v, then for every parameter a, y(a) is true under v. 

(2) If 6 is true under v, then for at least one parameter a, 0(a) is true 
under v. 

Then v is a first-order valuation. 


Proof. We shall use the conventional notation “g(x)” for any formula 
containing no free variables other than (possibly) x, and for any para- 
meter a, “p(a)” denotes [ (x) ]*. 

(a) Suppose (V x)@(x) is true under v. Then by (1), for every para- 
meter a, ~(a) is true under v. We must show that conversely, if for every a, 
(a) is true under v, then (V x) @(x) 1s true under v. This is equivalent to 
saying that if (V x) (x) is false (under v) then for at least one parameter a, 
(a) is false. So suppose that (V x) (x) is false. Then the formula ~(V x) 
~(x) must be true (since v is a Boolean valuation). Then by (2), there is a 
parameter a such that the formula ~ g(a) is true. Then g(a) must be false. 

(b) If (43 x) p(x) is true (under v) then for at least one a, g(a) is true 
(by (2)). If (4x) p(x) is false, then ~ (4x) p(x) is true, hence (by (1)) ~ g(a) is 
true for every parameter a, hence (a) is false for every a. Thus if for 
some a, ~(a) is true, then (4x) (x) is true. This concludes the proof. 

For future reference, we wish to point out that Lemma 1 can be 
formulated in the following equivalent form: Call a set § a Boolean truth 
set if it is a truth set in the sense of propositional logic (i.e. its characteristic 
function is a Boolean valuation). We might remark that condition M, 
of the definition of a magic set is equivalent to the condition that every 
Boolean truth set which includes M is a First-Order truth set. Lemma 1 
is thus equivalent to the following: 


Lemma 1. Let S be a Boolean truth set with the following 2 pro- 
perties (for every y, 6): 

(1) If yeS, then for every parameter a, y(a)eES. 

(2) If d€S, then for at least one parameter a, 6(a)éES. 

Then S is a first-order truth set. 
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Now we return to the proof of theorem 2. We use the following 
method of pre-assigned parameters. We enumerate all 6-sentences in some 
denumerable sequence 6,,0,...,0,,.-. and we also consider all our 
parameters given in some fixed enumeration b,,b,,...,b,,... Now we 
define a, to be the first parameter (of the sequence {b;}) which does not 
occur in 6,, a, the next parameter which does not occur in 0, nor 6,, 
a, the next parameter which does not occur in 6,,05,03,...,d,4, the 
first parameter after a,,...,a, which does not occur in 6,, 02, ..., Ons On¢ 1 
etc. Let R, be the set 6, >06,(a,), 6, >6,(a)),...,6, > 6,(d,),-.. Clearly, 
R, is regular. Let R, be the set of all sentences y=> y(a) (for every y and 
every a). Then R, UR, is obviously regular, and this will be our magic 
set M. 

To prove (M,) (of our definition of a magic set), suppose v is a Boolean 
valuation satisfying M. Suppose y is true under v. Now for any a, y > y(a) 
is true under v (because y > y(a) is an element of M). Then y(a) must be 
true under v (because y, y > y(a) both are true under v and v is a Boolean 
valuation). Thus hypothesis (1) of Lemma 1 is satisfied. To prove hypo- 
thesis (2), if 6 is true under v, then for at least one a, 6 > 6(a) is true (since 
it belongs to M), hence 6(a) is true. Thus hypothesis (2) of Lemma 1 
holds, so v is indeed a first-order valuation. 

As for condition (M,), any finite subset R of M is regular, hence if S 
is a finite (or for that matter even infinite) pure set which is satisfiable, 
then R US is again satisfiable by Theorem 1, Chapter VII. This concludes 
the proof of Theorem 2. 
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The mere existence of a magic set (even one which is not regular) 
immediately yields the First Order Compactness Theorem and the 
Skolem-Léwenheim Theorem as consequences of the Compactness 
Theorem for propositional logic by the following beautiful argument. 
We first note the trivial: 


Lemma 2. Any superset S of M (where M is any magic set) which is 
truth-functionally satisfiable is also first-order satisfiable in a denumerable 
domain. 

Proof. By hypothesis there is a Boolean valuation (of E”) which 
satisfies S. Then of course, v also satisfies M. Then v must be a first-order 
valuation (since M is a magic set). So S is satisfied by the first-order 
valuation v (of the denumerable set E"). This concludes the proof. 

Now for the remarkable proof of the Compactness and Skolem- 
Léwenheim theorems. | 

Suppose that S is a set of pure sentences such that every finite subset 
of S is (first-order) satisfiable. Let M be any magic set. We first assert 
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that every finite subset K of M US is satisfiable. For K is the union of a 
finite subset M, of M with a finite subset S, of S. By hypothesis, Sp is 
satisfiable. Therefore, My) US, is satisfiable (by property M, of magic 
sets). Since K is first-order satisfiable, then a-fortiori K is truth-func- 
tionally satisfiable (since any First Order valuation satisfying K is also 
a Boolean valuation satisfying K). Thus we have shown that every finite 
subset of M U S is truth-functionally satisfiable. Then by the Compactness 
Theorem for propositional logic, the entire set MUS 1s truth-functionally 
satisfiable. Then by the above lemma, the set M U S—and hence also the 
subset S—is first-order satisfiable in a denumerable domain. This 
concludes the proof. 

Now we point out that the existence of a regular magic set immediately 
yields an alternative proof of the weak form of the Fundamental Theo- 
rem. For suppose X is valid; let M be a regular set. Then by Theorem 1, 
M includes a finite subset R which truth-functionally implies X, and of 
course, R is a regular finite set. Thus every valid X is truth-functionally 
implied by a finite regular set. 

We know that even the weak form of the Fundamental Theorem is 
enough to yield the completeness of the axiom system Q,. Thus the 
completeness of Q, can be alternatively proved by the use of magic sets 
(rather than by our earlier analytic methods). 

Next we wish to show we can use magic sets to give an alternative 
(and simple) proof of the strong form of the Fundamental Theorem. Let 
us first note that property M, of the definition of “magic sets” can be 
alternatively stated thus: For any Boolean valuation v satisfying M, the 
set of all sentences true under v 1s a first-order truth set. What we now 
need is the following closely related fact. 


Lemma 3. Let M bea regular magic set, and for any sentence X, let 
My be the set of all elements Q > Q(a) of M such that Q is a weak sub- 
formula of X. Let v be any Boolean valuation which satisfies My and let 
Ty be the set of all weak subformulas of X which are true under v. Then 
Ty is a Hintikka set. 


Proof. We leave to the reader the trivial verification that Ty has 
properties Hy, H,, H, of Hintikka sets. As for H,, suppose ye Ty. Then 
y is both true (under v) and is a weak subformula of X. By the latter fact, 
y > y(a) belongs to My (for every a), hence is true under v, so y(a) is true 
under v. Also y(a) must be a weak subformula of X (since y is), so y(a)e Ty. 
Proof of H, is analogous, and is left to the reader. 

Now, to prove the strong form of the Fundamental Theorem using 
magic sets, we reason as follows. Let M be a regular magic set and let X 
be any pure valid sentence. Define M, as in Lemma 3. Let v be any 


§ 1. Synthetic Consistency Properties 91 


Boolean valuation satisfying M,. We wish to show that X is true under v. 
Let Ty be the set of all weak subformulas of X which are true under 1; 
we are to show that X is a member of Ty. Since X, ~ X are both weak 
subformulas of X and since exactly one of X, ~X is true under »v, then 
exactly one of X, ~ X lies in Ty. Now Ty is a Hintikka set (by Lemma 3), 
hence every element of T, is first-order satisfiable (indeed T, is simulta- 
neously satisfiable by Hintikka’s lemma). But ~X is not first-order 
satisfiable (since X is valid), hence ~ X cannot lie in T,. Thus it must be 
X that lies in Ty, so X is true under v. 

We have thus shown that for any valid pure sentence X, X is truth- 
functionally implied by M,. Then by the Compactness Theorem for 
propositional logic, X must be truth-functionally implied by some finite 
subset R of My. It is immediate from the definition of M, that R is not 
only regular, but that R is an associate of {~ X}. This concludes the 
proof. 

Exercise. In our construction of a regular magic set M, the set of 
parameters a,,d>,...,d,,... may fail to exhaust all members of {b;}. Can 
you modify the construction so that every parameter appears as one of 
the a;? 


Chapter X 
Analytic versus Synthetic Consistency Properties 


We have remarked earlier that magic sets emerged from the com- 
pleteness proofs of Henkin and Hasenjaeger. In this chapter we wish 
to discuss the Henkin and Hasenjaeger completeness proofs and their 
relationship to the completeness proofs of earlier chapters. We conclude 
this chapter with a new proof of the Unifying Principle—which circum- 
vents the necessity of appealing to systematic tableaux—and we discuss 
the essential differences and similarities of what are basically two types 
of completeness proofs; the one along the lines of Lindenbaum-Henkin, 
the other along the lines of Gddel-Herbrand-Gentzen. 


§ 1. Synthetic Consistency Properties 


We have earlier spoken much about analytic consistency properties 
I’. Now let A be a property of sets (of sentences) which again is of finite 
character. And again we shall call a set S A-consistent (A4-inconsistent) 
if S does (does not) have the property A, and we shall call a sentence 
X A-provable if the set {~ X} is A-inconsistent. Now we define A to be 
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a synthetic consistency property if the following conditions hold (for 
every S,y, 0): 

By: If S is truth-functionally inconsistent (i.e. if some finite subset of 
S is truth-functionally unsatisfiable), then S is 4-inconsistent. 

B,: If {S,y} is A-consistent, so is {S,),(a)}. 

B,: If {S,6} is d-consistent and if a does not occur in {S,6}, then 
{S,6,6(a)} is A-consistent. 

B,: If {S,X} is A-inconsistent and if {S, ~ X} is 4-inconsistent, then 
S is A-inconsistent. Stated otherwise, if S is A-consistent, then for every 
sentence X, at least one of the sets {S, X} or {S, ~ X} is A-consistent. 

We have purposely skipped the subscripts 1, 2 in our numbering of 
conditions B,)—B, to allow us to compare them more easily with the 
conditions A,— A, defining analytic consistency properties. 

Condition B, is an obvious strengthening of Ay. Conditions A,, A, 
have no counterpart in the definition of synthetic consistency properties. 
Conditions B,, B, (for the quantifiers) are the same as A3, A, respectively. 
And condition B, is totally absent from the definition of analytic con- 
sistency. We shall refer to this very important condition B, as the cut 
condititon. 

Conditions B,, B; at once imply the following condition which we 
will call B,: If S is A-consistent and if some finite subset of S truth- 
functionally implies X, then {S, X} is 4-consistent. 


Proof. If {S,X} were not A-consistent, then {S, ~ X} would be 4-con- 
sistent (by B,), but this is contrary to By (since by hypothesis some finite 
subset of {S, ~ X} is not truth-functionally satisfiable). 

Let us now note 


Theorem 1. Every synthetic consistency property is also an analytic 
consistency property. 


Proof. It remains to show that conditions A,, A, hold (reading “A” 
for “I”’). 

(1): Suppose {S,a} is 4-consistent. Since « truth-functionally implies 
a,, then {S,a,«,} is 4-consistent (by B,). Again since « truth-functionally 
implies a,, then {S,a,a,,a} is A-consistent (by B,). 

(2): Suppose {S,8} is A-consistent. Then either {S,B,B,} or {S,B,B,} 
is A-consistent (by B;). If the former, then certainly at least one of {S, B, B,} 
or {S,f,B,} is A-consistent and we have won our point. So suppose the 
latter—i.e. that {S,8,B,} is A-consistent. We then wish to show that 
{S,B,B,} is A-consistent. Well either, {S,B,8,,B,} or {S,B,B,,B2} is 
A-consistent (why?), but the latter is impossible (since {8,f8,,8,} is not 
truth-functionally satisfiable). Therefore {S,,B,,B.} is A-consistent, 
hence so is its subset {S, 8, B.} (because A-consistency is of finite character). 
This concludes the proof. 
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We have earlier asked the reader to verify that consistency in the 
axiom system Q, is an analytic consistency property. Actually it is just 
about as easy to verify that consistency in Q, is even a synthetic consistency 
property. 

Now Henkin’s completeness proof is for systems like Q,, in which 
consistency within the system is immediately a synthetic consistency 
property. We henceforth let “A” stand for any synthetic consistency 
property. Suppose S is a pure set which is A-consistent. Henkin’s idea is 
to show that S can be extended to a first-order truth set. Of course, we 
can speak of maximal A-consistency, but in general it is not the case that 
a maximal A-consistent set is a first-order truth set! There is another 
condition needed, which we now discuss. 

We shall call a set S E-complete (existentially complete) if for every 
o€S, there is at least one parameter a such that 6(a)eS. Now we assert 


Theorem 2. If M is both maximally A-consistent and E-complete, then 
M is a first-order truth set. 


Proof. Suppose M is maximally A-consistent and E-complete. That M 
is a Boolean truth set can be proved exactly as in Lemma 1 (preceding 
Lindenbaum’s Theorem)—Chapter III (indeed conditions By, B; are 
exactly L,, L, discussed immediately following the statement of this 
lemma). Next we show that the hypotheses of Lemma 1’ of Chapter IX 
hold for M. Well, suppose ye M. Then {M,y}=M, so {M,y} is A-con- 
sistent. Then for every parameter a, {M,y,y(a)} is 4-consistent (by B,). 
But, {M,y,y(a)}={M,y(a)} is A-consistent. Then y(a)eM (since M is 
maximally A-consistent). Thus yeM implies that for every a,y(a)EeM. 
Thus M has the first of the two properties required by Lemma 1’ 
(Chapter IX). The second property is simply E-completeness. Thus by 
Lemma 1’, M is a first-order truth set. 


Remark. The reader may wonder why E-completeness is not a con- 
sequence of maximal A-consistency. Well, suppose M is maximally 
A-consistent and that 6€M. Now, if there is any parameter a which 
occurs in no element of M, then indeed by B, and the maximal 4-con- 
sistency of M, 6(a) would have to be an element of M. But it may be 
that every parameter occurs in some element of M, in which case we 
have no assurance that for some a, {M, 6(a)} is again A-consistent. 

Now, Henkin’s idea is to show how a A-consistent pure set S can be 
extended to a set which is simultaneously maximally A-consistent and 
E-complete. He does this by the following ingenious method. 

We partition our denumerable set of parameters into denumerably 
many sets A,,A,,...,A,,..., each of which is denumerable—or rather 
we look at the denumerable sequence A,,A3,...,A,,.-. (without repeti- 
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tions) where each A, is itself a denumerable sequence aj,a},..., a’, ... of 
parameters (without repetitions). We let E, be the set of all pure sen- 
tences, and for each n>0, let E,, be the set of all sentences using para- 
meters just from A, U::-UA,. We let E,, be the set of all sentences, and 
we note that E,, =E,)UE,U::UE,U°::. 

Call a set S E-complete relative to a subset S' if, for all o€S’, there 
is a parameter a such that d(a)eES. 


Lemma. Any A-consistent subset S of E,, can be extended to a subset 
of E,,., which is again A-consistent and also E-complete relative to S. 


Proof. Arrange all 6-type elements of S in a denumerable sequence 
61,02, ..+, 0,5. (Or a finite sequence, if there are only finitely many such 
elements). Now all parameters of A,,, are new to S, and A,,, is a 
sequence b,,b,,...,b,,.... Also each b;,, is new to {S,b,,...,b;}. By 
property B,, the set {S,6,(b,)} is 4-consistent. Then again by B,, the 
set {S,5,(b,), 62(b,)} is 4-consistent. By an obvious induction argument, 
for each n>O, the set {S,6,(b,),...,6,(b,)} is 4-consistent. This implies 
that the set {S,6,(b,), ..., 6,(b,), -..} is 4-consistent (because A is a prop- 
erty of finite character). And this set {S,6,(b,), ..., 6,(b,), ...$ is obviously 
E-complete relative to S (and also a subset E,,, ,). This concludes the 
proof. 

Now for Henkin’s construction. Let S be a pure set which is A-con- 
sistent. By the above lemma, we can extend S to a subset S, of E, which 
is A-consistent and E-complete relative to S. Of course, $, may fail to be 
a maximally A-consistent subset of E,, but by Lindenbaum’s construction 
(or Tukey’s lemma—cf. Chapter III), S, can be extended to a maximally 
A-consistent subset Sj of E,. However S; may fail to be E-complete rela- 
tive to S (because in extending S, to S} we might have added some 6 
without adding any 6(a)!). But by the above lemma, we can extend Sj toa 
A-consistent subset S, of E, which is E-complete relative to S|. However, 
S,, though A-consistent, may fail to be a maximally A-consistent subset 
of E,, so we extend it to a maximally A-consistent subset $3 of E,. We 
thus alternate between Lindenbaum’s construction and the construction 
of the above lemma, and generate a denumerable ascending sequence 
S,5,,57,52,S3,.--,5;,5;,--. (ascending in the sense that SCS, SS} ¢ 
---€§.¢ §* c---) such that for each i, S;,, is E-complete relative to 
S; and S; is a maximally A-consistent subset of E;. Then Henkin takes 
the union SUS,US;U- -US;US; U--:. We leave it to the reader to 
verify that this union is both E-complete and maximally A-consistent 
(i.e. is a maximally A-consistent subset of E.,). Then by Theorem 2, this 
union a first-order truth set, so the subset S is first-order satisfiable 
(indeed in a denumerable domain). This concludes Henkin’s proof. 
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The Henkin-Hasenjaeger Proof. A simplification of Henkin’s proof 
—which avoids alternating between Lindenbaum’s construction and 
E-completion—was discovered independently by Hasenjaeger, Henkin 
(and apparently also by Beth, and probably several others). 

The key fact needed is the following 


Lemma. Suppose S is A-consistent. Then 
(1) {S,p > y(a)} is A-consistent. 
(2) {S,6 > d(a)} is A-consistent, providing a is new to. {S,6}. 


Proof. Suppose S is A-consistent. Now consider any sentence 
Q > Q(a), where Q is either some y or some 6 such that a is new to {S,Q}. 
We wish to show that {S,Q > Q(a)} is A-consistent. Since S is A-con- 
sistent, then either {S,Q} or {S,~@Q} is A-consistent (by B5). If {S,Q} is 
A-consistent, so is {S,Q,Q(a)} (by B;, if Q is some y, or by B, if Q is 
some d—since in this case we are assuming that a is new to {S,Q}), and 
hence the subset {S, Q(a)} is A-consistent. Thus either {S, ~Q} or {S, Q(a)} 
is A-consistent. If the former, then {S,Q > Q(a)} is A-consistent (by 
property B,, since ~Q truth-functionally implies Q > Q(a)). If the latter, 
then again {S,Q > Q(a)} is A-consistent (by B,, since Q(a) truth-func- 
tionally implies Q > Q(a)). Thus in either case, {S,Q > Q(a)} is A-con- 
sistent. 


Remark. The proof of the above lemma is essentially the same thing 
as the proof that everything provable in the system Q, is provable in 
the system Q—indeed one can obtain both results from a common 
construction (how’?). 

Now we consider the Henkin-Hasenjaeger proof. Suppose S is a 
pure set which is A-consistent. Arrange all 6-sentences (not just those 
in S!) in some denumerable sequence 6,,6),...,6,,.... By the above 
lemma, we can take any parameter a, not in 6,, and adjoin to S the 
sentence 6, > 6,(a,), and the resulting set S, is again A-consistent. Then 
take a parameter a, not in {S,,6,} and S,U {6, >6,(a,)} is again A-con- 
sistent. So we inductively define the sequence S,,...,5,,... by the con- 
ditions: So=S; S;,,=S;U{6;41 > 5;+1(@;4,)} where a; is some para- 
meter (say the first in some fixed enumeration) which does not occur in 
(S;,6;4,}. Then each S; is 4-consistent, so their union S* is A-consistent. 
Now, S* has the property that any superset S° of S* which is closed under 
truth-functional implication must be E-complete (because if d€S°, then 
for some parameter a, 6 > 6(a)eS°, hence by the closure under truth-func- 
tional implication, 6(a)eS°). Now take for S° a maximally consistent 
extension of S*. Then S° must be closed under truth-functional impli- 
cation (why?), hence S° is E-complete. Hence S° is a first-order truth set. 
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Discussion. In effect, the Henkin-Hasenjaeger construction manu- 
factures “half” of a magic set in the course of the proof, and adjoins it to 
S and obtains S*. At this point, one could modify the remainder of the 
proof as follows: Instead of extending S* to a maximal consistent set, 
we could alternatively add to S" all sentences of the form y > (a); the 
resulting set S” is again consistent by (1) of the Lemma. Then S™ is 
truth-functionally satisfiable, so we take a Boolean valuation v satisfying 
S* and then the set S™ of all sentences true under v is a first-order truth 
set (because S*” is a superset of a magic set). Essentially, therefore, the 
Henkin-Hasenjaeger proof boils down to the facts: (i) for any A-con- 
sistent pure set S and any magic set M, the set SUM is again A-con- 
sistent (and this follows from the above Lemma by induction); (ii) any 
truth-functionally satisfiable superset of a magic set is first-order satis- 
fiable. 


§ 2. A More Direct Construction 


Professor Henkin has pointed out to the author another complete- 
ness proof which is strikingly direct. And this proof can be modified to 
yield another proof of our Unifying Principle (and hence also of the 
Completeness theorem for tableaux) which completely avoids the necessity 
for considering “systematic” tableaux. 

The problem, as before, is how to extend a A-consistent pure set S 
to a first-order truth set. Let us recall Lindenbaum’s construction: We 
first enumerate all sentences in a sequence X,,..., X,,..., and at the n-th 
stage of our construction, we take the set S, already at hand, and we 
adjoin X,4, providing that this does not destroy 4-consistency, other- 
wise we leave X,,,, out. Now Henkin suggests the following modifica- 
tion: If we do adjoin X,,4,, and if X,4, happens to be some 6, then we 
also throw in 6(a) for some a new to S,. Then the union SUS, U---US,uU--- 
is without further ado both maximally A-consistent and E-complete 
(verify !). 

Thus in one construction, we have simultaneously achieved maximal 
consistency and E-completeness. It is hard to imagine a more direct 
completeness proof! 

Now for the modification of the proof for analytic consistency prop- 
erties ’. Of course we can perform the same construction, and the re- 
sulting set SUS,U---US,U>::: will indeed be both maximally I -con- 
sistent and E-complete. But such a set is not necessarily a first-order 
truth set! However, we have the following: 


Theorem. Let S° be the set of all subformulas of S, and let M be a 
maximally I -consistent subset of S° which is also E-complete. Then M is 
a Hintikka set. 
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Proof. The proof that M satisfies the truth-functional conditions 
H,,H,,H, of the definition of “Hintikka set” is the same as that of 
the theorem of § 3, Chapter III. As for H,, suppose ye M. Then for every 
a, the set {M,y(a)} is '-consistent. But y(a)eS° (since yeS°), so y(ajeM 
(by the fact that M is maximally I’ -consistent relative to S°). This proves 
H,. Condition H, is immediate from the hypothesis of E-completeness. 
This concludes the proof. 


Remark. Strictly speaking, the above theorem is correct for the case 
when we are working with signed formulas. If we work with unsigned 
formulas, then we must introduce the notion of “descendent” in First- 
Order Logic, as we did for propositional logic (cf. §3, Chapter III). We 
do this by simply adding to the definition of direct descendent (§3, Chap- 
ter III) “or X is some y and Y is y(a) for some a, or X is some 6 and Y 
is 6(a) for some a”. Then the above theorem is correct, reading “descend- 
ent” for “subformula”. 

Now the modification of Henkin’s idea should be obvious. Suppose 
S is a ['-consistent pure set. Let S° be the set of all subformulas (or 
descendents, if we are working with unsigned formulas) of elements of 
S, and enumerate S° in a denumerable sequence X,,..., X,,.... Then 
carry out the same construction, and the resulting set SUS, U::-US,U>:: 
will be maximally I’-consistent relative to S° and E-complete. By the 
above theorem it is a Hintikka set, hence by Hintikka’s lemma it is 
satisfiable, hence the subset S is satisfiable (and indeed in a denumerable 
domain). 

We now see clearly that there are basically two types of complete- 
ness proofs. The first (along the Lindenbaum-Henkin lines) extends the 
“consistent” set directly to a truth set, and for this we need the full force 
of synthetic consistency properties (in particular the cut condition plays 
an essential role). And this method is directly applicable to the usual 
Hilbert-type formalization of First-Order Logic (such as the system Q,). 
The second type of completeness proof (which we term “analytic”, and 
is along the lines of Gédel, Herbrand, Gentzen) extends the “con- 
sistent” set, not directly to a truth set, but to a Hintikka set, which then 
can be further extended to a truth set. And for this method to work, we 
do not need the cut condition for synthetic consistency properties, but 
only the conditions of analytic consistency properties. 


Part III 


Further Topics in First-Order Logic 


Chapter XI 
Gentzen Systems 


§ 1. Gentzen Systems for Propositional Logic 


We have written this section so that it can be read directly following 
Chapter II. 

Block Tableaux. Preparatory to the main subject of this chapter, it 
will be convenient to consider a variant of the tableau method. 

Our method of analytic tableau is a variant of the tableau method 
of BeTH. The block tableaux, to which we now turn, are substantially 
the tableaux of Hintikka [/]. In these tableaux, the “points” of the tree 
are finite sets of formulas rather than single formulas. And what we can 
do at any stage of the construction is dependent solely on the end points 
of the tree. | 

By a block tableau for a finite set K, we mean a tree constructed by 
placing the set K at the origin, and then continuing according to the 
following rules: 


In words the rules above are: 
A: To any end point {S,a«} we may adjoin {S,«,} as sole successor, or 
we may adjoin {S,a,} as sole successor. 
B: To any end point {S, 8} we may simultaneously adjoin {S,B,} as left 
successor and {S,8,} as right successor. 

We call a block tableau closed if each end point contains some ele- 
ment and its conjugate, and atomically closed if each end point contains 
some atomic element and its conjugate. 

Let us carefully note that in Rule A, we allow the possibility that 
a may be an element of S, and in Rule B, that f may be an element of S. 
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Thus the following rules are but special cases of rules A and B: 


4’ 
B': 


Example of a Block Tableau. The formula p > r is truth-functionally 
implied by the set p> q, q>r—equivalently, the set {Tp>q, Tq>r, 
Fp >r} is unsatisfiable. The following is a closed block tableau for this 


set: 
Tp>q,Tq>r,Fp>r 


Tp>q,Tq>r,Fp>r,Tp 


Tp>q,Tq>r,Tp,Fr 


Tq,Tq>r,Tp,Fr 


Tq, Tr, Tp, Fr 


Completeness. Converting a closed analytic tableau for a set S into a 
closed block tableau for S is a very easily matter. Consider first the case 
that S contains only one sentence X; let 7 be a closed analytic tableau 
for {X}. Then if we simply replace each point of 7 by the set consisting 
of the point itself together with all points above it on the branch, the 
resulting tree B is closed block tableau for {X}. 

Example. The following is a closed analytic tableau for F(p v gq) > (qv p): 


Fp,Tq>r,Tp,Fr 


Tq, Fq, Tp, Fr 


(1) F(pvqg)>(qvp) 
(2) T(pv4q) 

(3) F(qvp) 

(4) Faq 

(5) Fp 


(6) Tp (1) Tq 
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The following is its corresponding block tableau: 


(1 

02) 

3) 

(4) | Fpvg>(4vp)Tpvg.Fqv pF 4q 
(5) 


(6) | F(pvq)>(qv p), Tpvg,Fqyv p.Fq,F p,Tp 


(7) | F(pvqg)> (av p), Tpvg.Fqvp,Fq,Fp,Tq 


We have just shown how to convert a closed analytic tableau for a 
single formula into a closed block tableau for that formula. Now let S 
be a finite set {X,,..., X,} (where perhaps n> 1), and let 7 be a closed 
analytic tableau for S. To obtain a closed block tableau for S, we proceed 
as before, but we then delete the origin {X,}, its successor {X,, X5},..., 
its successor {X,,..., X,_1}. 

Example. The following is a closed analytic tableau for the set 


{Tp Aq, Fp}: 
(1) Tpaq 


(2) Fp 
(3) Tp 


Replacing each point of the tree by the set of all points which domi- 
nate it, we obtain the tree: 


(1) 
(2) 


This is not a block tableau for {Tp A q, Fp}, but if we delete point (1), 
we obtain the desired block tableau: 
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Modified Block Tableaux. The following modification of block tab- 
leaux will be useful. 

Rule A of our rules for constructing block tableaux is really 2 rules 
(one for a, and one for a,). Let us now replace this by the following 
single rule: 


Call a tree constructed using modified Rule A in place of the original 
Rule A a modified block tableau. 

Any closed modified block tableau for S can be easily converted into 
a closed block tableau for S by replacing each part of the tree: 


by 


(In other words, 2 applications of the original Rule A can be used to 
accomplish the same thing as one application of the modified Rule A). 

To convert a closed block tableau # for S into a closed modified 
block tableau for S, we replace each point {R,«,} of @ which was ob- 
tained from its predecessor {R,a} by Rule A by the point {R,a,,«,} and 
also add «, to each point of the tree below that point. The resulting# 
is not quite a modified tableau, since certain points instead of being 
derived from their predecessors by Rule A or Rule B may simply be 
repetitions of their predecessors. But if we simply delete these repetitions 
from the tree, the resulting tree 2” is then a modified block tableau for 
S. And of course, ” is closed (assuming F 1s closed). 

Gentzen Sequents. By a sequent we shall mean an ordered pair «U,V 
of finite sets of unsigned formulas. We shall use the more suggestive 
notation UV for the sequent <U,V)>. Informally we read U-V as 
saying “if all elements of U are true, then at least one element of V is 
true”. More precisely, we say that a sequent U-V is true under an 
interpretation (or Boolean valuation) I if either some element of U is 
false under I or some element of V 1s true under J]—or what is the same 
thing, if all elements of U are true under J, then at least one element of 
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V is true under J. Thus under any interpretation, the sequent X,,...,X,, 
—Y,,..., ¥, (ie. the sequent <{X,,...,X,}, {Y%,..., %}>) has the same 
truth value as the formula(...(X, A X2)A°-*°A X,) >(...(%, v Y)v---v ¥). 
We call U-V a tautology iff it is true under all interpretations; satis- 
fiable iff it 1s true in at least one. 

The elements of U and the elements of V are called the terms of the 
sequent U-V. We allow the case that one or both sides of the arrow 
(i.e. one or both of the sets U,V) may be the empty set ®. Following 
GENTZEN we use — Y,,..., ¥, to mean ®—Y,,..., ¥,, and X,,..., X,— to 
mean X,,...,X,—-®, and finally — to mean 6>@, We note that ~V 
is true (under a given interpretation) iff at least one element of V is true; 
U-— is true iff at least one element of U is false, and finally — is false in 
any interpretation (because the left side contains no member which is 
false—indeed it contains no members at all—and the right side contains 
no member which is true). Thus the sequent ®—@ is unsatisfiable. 

By a tableau for a sequent X,,...,X,—Y;,..., Y, 18 meant a tableau 
for the set {TX,,..., TX,, FY,,..., FY,}. Note that the sequent X,,..., X,, 
—+Y,,..., Y, is a tautology iff the set {TX,,..., TX,, FY,,..., FY,} is un- 
satisfiable. Accordingly, a closed tableau for the set {TX,,...,TX,, 
FY,,...,FY,} is also called a tableau-proof of the sequent X,,...,X, 
—Y,,..., Yh. 

The Axiom System Y,. Now we consider an axiom system GY, in which 
the formal objects are sequents. This system is a somewhat modernized 
version of Gentzen’s original (cf. the discussion at the end of §1). We 
have one axiom scheme, and eight inference rules—2 for each of the 
logical connectives; one for the introduction of the connective in the 
antecedent (left side of the arrow) and one for the introduction in the 
succedent (right side of the arrow). The postulates are as follows: 


Axioms. U,X >~V, X 


The rules are: 


. U,X,YoV 
Conjunction C.: =F 
U,X A YoV 

C.- U3V,X U-V,Y 

2° Us3V,XAY 

U-V, X,Y 
Disjunction Dd... ———— 
isjuncti UG SVXVY 

U,X-V U,YoV 

D,: il setae 


U,X v YoV 
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U,X3V,Y 
U-~V,X > Y 

_ U3V,X U,Y>V 
2° U,X > YoV 


Implication I,: 


Negati N,: U,X>V 
egation 1! UoV.~X 
U-V, X 

N : OT 

U,~X-V 


It is obvious that the axioms of Y, are tautologies, and we leave it 
to the reader to verify that all the inference rules preserve tautologies— 
indeed in any application of any inference rule, the conclusion is truth- 
functionally implied by its premises. Therefore all theorems of Y, are 
tautologies. We will shortly prove the completeness of )»—..e. that every 
sequent UV which is a tautology is provable in Fp. 

The System Y, in Uniform Notation. Now we shall again exploit our 
unifying “a, 6” notation which will enable us to collapse the eight in- 
ference rules of G, to two. 

Let S be a set {TX,,...,TX,, FY,,..., F Y,} of signed formulas. By 
|S| we shall mean the sequent X,,..., X,7 Y,,..., ¥,. The correspondence 
between sets S of signed formulas and their corresponding sequents 
|S| is obviously 1—1. 

Now we can reformulate the postulates of Y, in uniform notation 
as follows: 


Axioms. |S, TX, F X| 


Inference Rules. 


S061, o9| 


S.a 
B: 5 


9 


To see that this really is the system GY, we let U be the set of all X 
such that TX lies in S, and V the set of all Y such that FY lies in S. We 
also let X,,..., X,, be the members of U and Y,,..., Y, the members of V 
(thus S={TX,,..., TX, FY,,..., FY,}, and |S|=X4,..., Xj. OY,,.... Yo. 
Then the axioms are all sequents of the form ITX pee 1X, FY,,...,FY,, 
TX, FX|—.e. all sequents X,,...,X,,X—- Y;,..., %,,X—which is all 
sequents U,X-V,X. 
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As for the inference rules, we must consider separately the various « 
and f cases. Suppose, for example, that «= TX ~” Y. This case of Rule A 
is then “|TX,,...,.TX,,TX, TY,FY,,...,F Y,| yields |TX,,...,TX,, 
T(X AY), FY,,...,.F YI", which is “U,X,Y>V yields U,X AYoV”, 
which is rule C,. The reader can now easily verify that if we take F X v Y, 
FX2>/Y, F~X for a, we respectively get rules D,,I,,N,. If we take 
FX AY, TX vY, TX >Y, T~X for f, we respectively get rules C,,D,, 
I,,N,. (Also if we take F~X for a, we get N,; if we take T~X for B, 
we get N,.) Thus our uniform presentation of GY, is correct. 

We might remark that in our uniform presentation of Y), we needed 
only one metalinguistic variable “S”, whereas in the prior formulation 
we needed two metalinguistic variables “U”, “V”. 

Completeness of GY . Suppose X,,...,X,—7Y;,..., Y, 1S a tautology. 
Let .@ be a closed modified block tableau for the set {TX,,..., TX,, 
FY,,...,F Y,$. To transfer .W into a proof (in tree form) of X,,...,X, 
— Y,,..., Y, in the axiom system GY, all we need do is replace each point 
S of @ by the sequent |S| (but the resulting proof tree is usually dis- 
played upside down—1.e. with the origin at the bottom). Thus the system 
G, 1s complete. 

Example. The following is a closed modified block tableau for the 
sequent p> q>~q-> ~pP: 


Tp>qF~q> ~p 


Its corresponding proof in GY, is as follows: 


P>4,p P.q>q 
P,p>4q>4q 
p>4->4,~P 
pP>4~47~P 
p>q>~q>~P 


Discussion. We have remarked that the system Y, is a modification 
of the original system of Gentzen—it is substantially that which appears 
in Lyndon [/]. In the original Gentzen formulation, he worked with 
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sequents UV in which U,V instead of being finite sets of formulas 
are finite sequences of formulas. Instead of the axiom scheme U,X > V_X, 
Gentzen used the simpler scheme X—X. But also Gentzen added the 
following three so-called structural rules: 


Thinning: UV UV 
inning: UoVx U.XoV 
Contraction: U-V,X,X U,X,X-V 
ontraction: Tov UXoV™ 
U-V,,X, Y,V, U,,X,Y,U,-V 
Interchange: UsV,.Y.XV, U,.Y,X,U,0V 


The system—call it Y,—is equivalent to Y, in the following sense: 
Let 6, I’ be finite sequences of formulas; let U be the set of terms of 0 
and V be the set of terms of I’. Then 0@-T 1s provable in Y, iff U-V is 
provable in Gp. 

Several modifications of Y, exist. For example, let , be the system 
obtained from Y, by replacing rules C,, D, as follows: C, is replaced 
by the two rules: 


U,X-V U,YoV 
U,X \Y>V U,X NYoV 
D, is replaced by the two rules: 
U-V,XxX U-V,Y 
Un~V,XvY U>~V,XvY 


The system Y, is not uniform—e. it is not possible to present the 
inference rules of Y, in the uniform «a, B-notation. It can be made uniform 
by also replacing Rule J, by the two rules: 


U,X~V U-V,Y 
U-~V,X > Y U-~V,X > Y 


The resulting system—call it ,—is uniform—it can be presented 
uniformly by replacing Rule A by the two rules: 


|S, a, | |S,a9 | 
|S, | |S, a 


The system Y, bears roughly the same relationship to block tableaux 
as Y, does to modified block tableaux. Indeed, if in a closed block 
tableau we replace each point S by the sequent |S|, the resulting tree is 
a proof in Y,. 
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To extend the system of block tableaux (either modified or unmodi- 
fied) to Quantification Theory, we add the rules: 


S,y, (a) 


providing a is new. 


The procedure for converting a closed analytic tableau for S into a 
closed block tableau for S is exactly the same as for propositional logic. 

To extend the Gentzen system % to First-Order Logic, we add the 
following rules (~(x) is any sentence, g(a) is the result of substituting a 
for all free occurrences of x in @(x)): 


— U,e(@V UV, 9a) 
UW x) p(x) V *" U3V,(V x e(x) 


(providing a does not 
occur in the conclusion) 


UV, ep(a) U,p(ajypoVv 


1 OSVaAnem = =— Ss TAng@oV 


(with same proviso) 


In uniform notation, the quantificational rules are: 


|S, y(a)| 
S,y 
D: S20) , providing a does not occur 
, in any term of {S.6}. 


We shall use the letter “9” for the above system. The completeness 
of can be proved from the completeness of modified block tableaux in 
exactly the same manner as in propositional logic: If in a closed modified 
block tableau for K we replace each point S by the sequent |S|, we obtain 
a proof in Y of the sequent |K|. 

Of course, one can alternatively obtain the completeness of Y directly 
as a consequence of our unifying principle: Define S to be consistent if 
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the sequent |S| is not provable in Y. It is immediate from the postulates 
of Y that we then have an analytic consistency property. 

For subsequent applications, it is important to note that the system 9 
remains complete if we restrict our axiom scheme, U,X—V,X to the 
case that X is atomic. For we know that if S is unsatisfiable, then there is 
an atomically closed modified block tableau for S. The corresponding 
proof of |S| in Y will then use only this weaker axiom scheme. 


Chapter XII 


Elimination Theorems 
§ 1. Gentzen’s Hauptsatz 


Call X eliminable if for every finite set S, if there exists a closed tableau 
for {S,X} and a closed tableau for {S,X}, then there exists a closed 
tableau for S. It is an immediate corollary of the Completeness theorem 
for tableaux that every X is eliminable. For suppose there is a closed 
tableau for {S, X} and a closed tableau for {S, X}. Then both {S, X} and 
{S,X} are unsatisfiable, hence S is unsatisfiable (because in any inter- 
pretation at least one of X, X is true). Then by the Completeness theorem, 
there must be a closed tableau for S. 

Gentzen’s Hauptsatz (or rather its counterpart for tableaux) is that 
every X is eliminable. The above proof—using the Completeness 
theorem—is of course non-constructive. It provides no direct method 
whereby given a closed tableau Y, for {S,X} and a closed tableau #, 
for {S, X} we can find a closed tableau Y for S. Of course, given a closed 
tableau Y, for {S,X} and a closed tableau Y, for {S, X} we could simply 
ignore J , and Y, and set to work constructing a systematic tableau for S, 
and we know (by the Completeness theorem) that sooner or later our 
systematic tableau will close. But we have absolutely no idea of how long 
the systematic tableau for S will run before closing. By contrast, Gentzen’s 
proof of the Hauptsatz provides a wholly constructive upper bound for 
the number of points of Y, as a function @ of the number of points of 
the given tableaux ¥,,9,.') 

Gentzen, of course, proved the Hauptsatz not for tableaux (which 
were developed later), but for Gentzen systems. More specifically, 
consider the system ¢ of the last chapter. Gentzen’s form of the Haupt- 
satz is to the effect that if U,X ~>V and UX, V are both provable in &, 


‘) For readers with some familiarity with recursive function theory, Gentzen’s method 
provides a primitive recursive function @ rather than a general recursive g. 


§ 2. An Abstract Form of the Hauptsatz 111 


then U-V is provable in Y (in fact more generally: if U,, XV, and 
U,— X,V, are both provable in Y, then U,,U,-V,, V, is provable in 
G). To be more accurate, Gentzen considered a system 9 like Y to- 
gether with the following rule: 


U,,X-V, U,-X,V, 
(Cut Rule) U,,U,2V,V, 

A proof in 4" is called cut-free if it does not employ the cut rule. The 
precise form of Gentzen’s formulation is that any sequent provable in Y* 
has a cut-free proof in GY’ (i.e. a proof in Y). 

The Hauptsatz for tableaux easily implies the Hauptsatz for Gentzen 
systems (by using constructive translation processes from proofs by 
tableaux to proofs in Gentzen systems, and vice versa). We find tab- 
leaux more pleasant to deal with than Gentzen systems, hence our 
proof of the Hauptsatz (which is basically that of Gentzen, but rather 
more simple in many respects) will be motivated largely by tableau- 
considerations. Actually we shall prove the Hauptsatz in a more abstract 
form, which simultaneously yields the results both for tableaux and 
Gentzen’s systems without necessitating translation devices. 


§ 2. An Abstract Form of the Hauptsatz 


All sets S with which we now deal will be assumed finite. We shall 
say that S is closed if S contains some element and its conjugate. We shall 
say that S closes if there exists a closed tableau for S. For any natural 
number k, we shall say that S closes with weight k if there is a closed 
tableau 7 for S such that k is the number of points of 7 exclusive of the 
elements of S. Thus, e.g., a set S is closed iff S closes with weight 0. 

For any k>0, we shall say that S closes via Y with weight k if there 
is a closed tableau 7 for S of weight k such that Y is the element of S 
which was first used in the construction of 7. Obviously for any k>0, 
if S closes with weight k, then there must be an element Y of S such that S 
closes via Y with weight k (but the Y is not necessarily unique, since there 
might be two different closed tableaux 7 ,, 7, for S, both of weight k, and 
Y, may be the element of S first used in 7, and Y, may be the element of S 
first used in J). 

Now we wish to consider a purely abstract 3-place relation C(S, Y, k) 
between finite sets S, elements Y and natural numbers k, which we read 
“S closes via Y with weight k”. Define “S closes with weight k” to mean 
that either k=O and S is closed, or k>O and there exists some non- 
atomic YeS such that S closes via Y with weight k. And define “S closes” 
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to mean that there is some k such that S closes with weight k. Now 
define C to be an abstract Gentzen relation if the following conditions 
hold: 

P,: The property “S does not close” is an analytic consistency prop- 
erty—or equivalently, the property “S closes” is an analytic inconsistency 
property. In detail: 


(a) If {S,a,a,} or {S,a,«,$ closes, so does {S,a}. 

(b) If {S,B,B,} and {S,B,B,} both close, so does {S, B}. 

(c) If {S,y,y(a)} closes, so does {S,y}. 

(d) If {S,6,6(a)} closes for a new to {S,65} then {S,6} closes. 


P,: (a) If {S,a} closes via « with weight k, then either {S,a,a,} or 
{S,a,a%,} closes with weight <k. 

(b) If {S,B} closes via B with weight k, then both {S,8,f,} and 
{S, B, B,} close with weight <k. 

(c) If {S,y} closes via y with weight k, then for some parameter a, 
{S,y,y(a)} closes with weight <k. 

(d) If {S,6} closes via 6 with weight k, then for some parameter a 
which is new to {S,6}, the set {S,6,6(a)} closes with weight <k. 

P,: If S closes with weight k, then any (finite) superset of S closes 
with weight k. 

P,: If {S,6(a)} closes with weight k, where a is new to {S,6} then for 
every parameter b, {S,6(b)} closes with weight k. 

Before we proceed further with our abstract development, let us 
stop and verify that P,—P, all hold for the tableau interpretation of 
“S closes via Y with weight k”. Well, we already know P,. Condition P, 
is really quite obvious—e.g. (a) holds, because if {S,«} closes via « with 
weight k, then there is a closed tableau 7 for S, of weight k, and a is the 
element of S first used in the construction of 7. Then « was used either 
to adjoin a, or ~,—let us assume it was «,. Then 7 is also a tableau for 
{S,a,0,} of weight k—1. Similarly, we can verify (b), (c), (d) of P. 

As for P, let us remark that if 7 is a tableau for S, and if S’ isa 
superset of S, then 7 is not necessarily a tableau for S’ (because we may 
in J have used Rule D to introduce a parameter which though new to 
S may not be new to S’). But given a closed tableau 7 for S of weight k, 
we can obviously construct a closed tableau 7’ for S of weight k in 
which all newly introduced parameters lie outside of S’ (since S’ is finite). 
Then 7’ will be a closed tableau for S’ of weight k. 

As for P,, the verification is a bit more delicate. Suppose {S.d(ay' 
closes with weight k. Then we construct a closed tableau 7, for {S,6(a)} of 
weight k in which all newly introduced parameters are distinct from 
bot a and b. In this tableau, for every sentence X, let X} be the result of 
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substituting b for every occurrence of a in X and let 7} be the result of 
replacing each point X of 7 by X}. We assert that 7 is a closed tableau 
(cf. remarks below). Furthermore, for each XeES, Xf=X (because a 
does not occur in S) and [6(a)|}=6(b) (because a does not occur in 6), 
hence 7} is a closed tableau for {S,6(b)}. 


Remarks. A detailed verification of our assertion can be helped by 
first verifying the following: 
For any X, let X’= X}. Then for any a, f,y,0: 


(a) (a'); =(a,)’ [i=1,2] 
(6) (B);=(Bi) [i=1,2] 
(c) For c#a, [(c)]'=y'(o), but[y(a)]’ =y'(d). 
(d) Forc#a, [6(c)|'=0(c), but[d(a)]’=0'(b). 


Then it is easily verified that if a point Y of Z comes from X by 
Rule A, B,C, D, then Y’ legitimately comes from X’ in 7 by an appli- 
cation of the same rule. 

Now we return to our abstract development. As with the special case 
of tableaux, we call X eliminable if for every set S, if {S,X} and {S,X} 
both close, then S closes. We wish to prove: 


Theorem 1. (An abstract form of Gentzen’s Hauptsatz). Every X is 
eliminable. 


This theorem will follow from the following “auxilliary” theorem by 
a sort of “double induction” argument. First of all, we shall say of two 
sets S,,S, that they close with combined weight k if there are integers 
k,,k, such that S, closes with weight k,,S, closes with weight k,, and 
k,+k,=k. Now we call X k-eliminable if for every (finite) set S, if {S,X} 
and {S,X} close with combined weight k, then S closes. To say that X 
is eliminable is to say that for every k, X is k-eliminable. So our task is 
to show that for every X and every k, X 1s k-eliminable. This is done by 
a double induction on the degree n of X and the integer k. More specifi- 
cally we show 


Auxiliary Theorem. Let n, k be integers with the following 2 properties: 


C,: Every Y of degree <n 1s eliminable. 


C,: For every Y of degree n, and for every k’<k, Y is k’-eliminable. 
Then every X of degree n is k-eliminable. 


Proof of Auxiliary Theorem. Assume that n, k satisfy conditions C,, 
C,. Let X be of degree n, and let {S, X} close with weight k, and {S,X} 
close with weight k,, where k, +k,=k. We must show that S closes. 
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We first make the preliminary observation that if either k, or k,=0, 
then S must certainly close. For suppose k, =0. Then {S, X} is already 
closed. Then for some Y, {S, X} contains both Y, Y. If Y#X, then Y, Y 
both belong to S, so S is closed (and hence closes). If Y= X, then XeES, 
hence {S,X}=S, so S closes. Similarly if k, =0, then S closes. 

So we now assume that k, >1,k,>1. Then for some Ye {S, X}, {S, X} 
closes via Y with weight k, and for some Ze{S, X}, {S,X} closes via Z 
with weight k,. There are now two main cases to consider: (A) YA X 
or Z#X;(B) Y=X and Z=X. 

Case A. We assume Y#X (the case Z#X is obviously handled 
similarly). Now, {S}={S,Y} and so {S,Y,X} closes via Y with weight 
k,. Now we appeal to property P, (of the definition of an abstract Gentzen 
relation). If Y is either some «,+ or 6, then by (a), (c), (d) of P, there is some 
Y, such that {S,X,Y,Y,} closes with weight <k,, and furthermore if 
Y=a, then Y, =a, or Y;=a,;if Y=y, then for some a, Y, =y(a); if Y=6, 
then for some a new to {S, X, Y}, Y, =6(a). Since {S, X} closes with weight 
k,, then {S, ¥ X} closes with weight k, (because YeS), hence {S, Y, Y,,X} 
closes with weight k, (by P;). Thus {S,Y, Y,,X} and {S,Y, Y,,X} close 
with combined weight <k, hence by condition C,, {S,Y,Y,} closes. 
Therefore {S, Y} closes (by P,), thus S closes. 

If Y is some f, then {S,X,f,B,} and {S,X,f,B,} each closes with 
weight <k,. Also {S, X,B} closes with weight k,, so {S,X,8,B,} and 
{S,X, B, B,} each closes with weight k, (by P3). Thus {S,f,8,,X} and 
{S,B,B,,X} close with combined weight <k, hence {S,8,B,} closes. 
Likewise {S,,B,,X} and {S,B,B,,X} close with combined weight <k, 
so {S,B,B2} closes. Hence {S,f,B,} and {S,B,B,} both close, so {S, B} 
closes (by P,)}—1.e. S closes. This concludes Case A. 

Case B. Y=X and Z=X. Then {S,X} closes via X with weight 
k, and {S, X} closes via X with weight k,. Now one of X, X is some « or 
some y, and the other is respectively some f or some 6. We will assume 
it is X that is some « or some y (the case that X is some « or some y 
is obviously handled similarly). 

Suppose that X is some a. Then we have that {S,a} closed via « with 
weight k, and {S,a} closed via « with weight k,. By P,—(a), one of the 
sets {S,a,a,}, {S,a,0,} closes with weight <k,. We shall assume it is 
{S,a,0,} which closes with weight <k, (the case that it is {S,a,a,} is 
obviously handled similarly). Since {S,%} closes with weight k,, so does 
{S,a,a,} (by P3). Hence {S,a,,a} and {S,a,,a} close with combined 
weight <k, therefore {S,a,} closes (by hypothesis C,). Also, since {S,a} 
closes with weight k,, then {S,a,~,} (as well as {S,%,@,}) closes with 
weight <k, (by P,—(b), since « is some f). And {S,a,a@,} closes with 
weight k, (by P3, since {S,a} closes with weight k,), hence {S,%,,«} and 
{S,a%,,a} close with combined weight <k. Therefore (again by C,) {S,z,} 
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closes. So {S,a,} and {S,#,} both close. But «, is of degree <n, therefore 
by hypothesis C,, S closes. 

It remains to consider the case that X is some y. Then {S,y} closes 
via y with weight k, and {S,)} closes via 7 with weight k,. By P,, there is 
some parameter b such that {S,y,y(b)} closes with weight <k,. Since 
{S,7} closes with weight k,, then {S,7,y(b)} closes with weight k,. There- 
fore {S,y(b),y} and {S,y(b),y} close with combined weight <k, hence 
{S,y(b)} closes (by C,). Also {S,¥} closes via 7 with weight k,, so by P,, 
{S,7,y(a)} closes with weight k,, for some a new to {S,y}. Then by P,, 
for any parameter c, {S,7,)(c)} closes with weight <k,. In particular, 
{S,y,7(b)} closes with weight <k,. Also {S,y,7(b)} closes with weight k, 
(by P;), since {S,y} closes with weight k,. So {S,¥(b),y} and {S,7(b),7} 
close with combined weight <k, hence {S,)(b)} closes (by C,). Thus 
{S,y(b)} and {S,7(b)} both close, hence S closes (by hypothesis C,, 
because y(b) is of degree <n). This concludes the proof of the auxiliary 
theorem. 


Proof of Hauptsatz (Theorem I). Suppose some X were non-elimin- 
able. Then there would have to be a smallest integer n such that some X 
of degree n were non-eliminable. Then there would have to be a smallest 
integer k such that some X of degree n is not k-eliminable. We then 
have: (1) every X of degree <n is eliminable; (2) every X of degree n is 
k'-eliminable for all k’<k. Then by the auxiliary theorem, every X of 
degree n is k-eliminable. This contradicts the assertion that some X of 
degree n is not k-eliminable. 
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Corollary 1. If {S,,X} and {S,,X} both close, then S, US, closes. 


Proof. Suppose {S,,X} and {S,,X} both close. Since {S,,X} closes, 
so does {S,,5,,X} (by P;). Since {S,,X} closes, so does {S,,S,,X} 
(again by P;). Then {S,,S,} closes by Theorem I. 


Next we obtain a wholly constructive proof of 


Corollary 2. The set of sentences provable by tableaux is closed under 
modus ponens—i.e. if X, X > Y are both provable, so is Y. 


Proof. Suppose X, X > Y are both provable. Then {F X} and {F X > Y} 
both close. Since {F X > Y} closes, so does {F Y,F X > Y}. Since {F X} 
closes, so does {F Y¥, TX > Y,F X}. Also {F ¥, TX > Y, TY} closes (because 
it is closed). Therefore {F Y, TX > Y} closes (by P, —(b), taking TX > Y 
for B). So {FY,FX > Y} and {F Y,TX > Y} both close, hence by the 
Hauptsatz, F Y closes—t.e. Y is provable. 
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N.B.: Corollary 2 should not be confused with the relatively trivial 
fact (discussed in Chapter VII) that the addition of modus ponens to the 
tableau rules does not increase the class of provable formulas. 


The next 3 corollaries are more in the character of lemmas. 


Corollary 3. (a) If {S,«} closes, so does {S,a,,4,}. (b) If {S, B} closes, 
then {S,B,} and {S,B,} both close. 


Proof. (a) Suppose {S,«} closes. Then {S,a,«,,a,} closes. Now, 
{S,0,4,0,,%,} and {S,a,o,,0,,a,} are both closed, hence they both 
close. Therefore {S,%,a,,0,} closes (by P,—(b)). So {S,a,,a,,«} and 
{S,a,,@,,a} both close, so {S,a,,«,} closes by the Hauptsatz. 

(b) Suppose {5,8} closes. Then {S,B,B,} closes. Now {S,f,,B, B,} is 
closed, hence closes, so {S,,,B8} closes (by P; —(a)). Thus {S,B,,B} and 
{S,B,,B$ both close, so {S,B,} closes (by the Hauptsatz). A similar argu- 
ment shows that {S, B,} closes. 


Corollary 4. (a) If {S,y} and {S,y(a)} both close, then S closes. (b) If 
{S,6$ and {S,6(a)} both close, and if a is new to {S,6} then S closes. 


Proof. (a) Suppose {S, 7} and {S,y(a)} both close. Since {S, (a)} closes, 
so does {S,y} (because since {S,(a)} closes, then {S,y,y(a)} closes, hence 
{S,y} closes by P, —(c)). Thus {S,7} and {S,y} both close, so S closes. 

(b) Proof like (a), using P, —(d) in place of P, —(c). 


Corollary 5. (a) If {S,y > y(a)} closes, so does S. 
(b) If {8,6 > d(a)} closes, and if a is new to {S,6}, then S closes. 


Proof. (a) If {S,y > y(a)} closes, then by Corollary 3-(b), {S,y} and 
{S,y(a)} both close. Result then follows by Corollary 4a). 

(b) Proof like (a), using Corollary 4b) in place of Corollary 4-(a). 

From Corollary 5 follows by an obvious induction: 


Theorem 2. If R is regular and if no critical parameter of R occurs in 
S and if RUS closes, then S closes. 

In Chapter VII we gave a wholly constructive method of obtaining 
an associate R of S given a closed tableau for S. Now we can do the 
converse. 


Theorem 3. If S has an associate, then S closes. 


Proof. Let R be an associate of S. Then RUS is truth-functionally 
unsatisfiable, hence there is a closed tableau for RUS using only Rules 
A, B. (This by the completeness theorem for propositional logic, which, 
though semantical, is wholly constructive.) Then S closes by Theorem 2. 

We now know by purely constructive arguments that S closes iff S$ 
has an associate. Thus we now have 
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Theorem 4. (A syntactic form of Herbrand’s Theorem) (a) If {S,X} 
and {S,X* both have associates, then S has an associate. 

(b) The set of all X such that {~ xX‘ has an associate is closed under 
modus ponens. 


Chapter XIII 
Prenex Tableaux 


§ 1. Prenex Formulas 


By a prenex formula is meant a formula of the form (q, x,)---(q,X,)(M), 
where each q; is one of the quantifier symbols “V”, “J”, and x;#x,, for 
i#j, and M is a quantifier-free formula (i.e. M contains no quantifiers 
at all). One sometimes refers to M as the matrix of the prenex formula 
(41 X1)-**(GnXn)(M), and (41 X1)-+-(4,X,) 18 called the prefix. 

It is a well-known result of Quantification Theory that any formula X 
can be put into prenex normal form—1.e. X is equivalent to some prenex 
formula Y. The proof is based on the following basic equivalences (in 
these equivalences, p(x) is any formula, w is a formula, y is a variable 
which has no free occurrence in @(x) or w, and @(y) is the result of sub- 
stituting y for all free occurrences of x in @(x)): 


~ (Vx) p(x) ~( 4x) ~ g(x) 

~ (4x) p(x) =(Vx) ~ p(x) 
(Vxlo(x)aw~(Vx)Le(x) aw] 
Wa (Vx)e(x)=(Vx) [WA e(x)] 
(Ax)e(x)aw=(Ay) Le) ay] 
W A(Ax) e(x)=(4y) [Wa e(y)] 
(Vx)o(x) v¥~(Vy) Lo) v¥] 
wv (Vx) g(x)=(Vy)[W v e(y)] 
(Axo) vy~(Fy) Le) v¥] 
Wv (Axe(x)=(4) LY v e(y)] 
W>(4x)0(x)~(4y) [Wr e(y)] 
(Ax)o(x)>¥~(Vy) Le) >¥] 
W>(Vx)o(x)~(Vy)[¥> e(y)] 
(Vx)o(xJ>~~(Ay)[o)>¥] 


These equivalences enable us to move interior quantifiers to the front 
of a formula. A complete proof that any formula can be put into prenex 
form can be found in virtually any introductory text (e.g. Church [1], 
Kleene [1], Mendelson [1]), though the reader not familiar with the 
proof should have no difficulty working one out using the exercises below. 
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Exercise 1. Suppose A, B are respectively equivalent to A,, B,. Prove: 


(1) ~A is equivalent to ~ A,, 

(2) (qx)A is equivalent to (qx) A, (where q is V or 3). 

(3) For each of the binary connectives 0, AoB is equivalent to A,oB,. 
(4) (qx)A is equivalent to A, if x has no free occurrence in A. 


Exercise 2. Suppose A, B are prenex formulas. Using Exercise 1 and 
the basic equivalences given previously, show by induction on the number 
of quantifiers in the prefixes of A, B, that: 


(1) ~A can be put into prenex form. 
(2) AoB can be put into prenex form. 
(3) (Vx)A can be put into prenex form. 


Exercise 3. Using Exercise 2, show that any formula A can be put 
into prenex form (use induction on the number of logical connectives and 
quantifiers in A). 


§ 2. Prenex Tableaux 


We now describe a proof procedure’) for prenex sentences, which is 
like tableaux, except that we need no branching! 

Let S be a finite set of prenex-sentences. By a prenex-tableau for S 
we mean a tableau for S which uses only the quantificational rules C, D. 
Since we do not use rule B, then naturally a prenex-tableau has only one 
branch. 

We call a prenex tableau P-closed if the set of terms of (the one branch 
of) the tableau is truth-functionally unsatisfiable. 

Of course, given a P-closed prenex tableau for S, we can further 
extend it—using just the truth-functional rules A, B—to an ordinary 
tableau which is closed (in the ordinary sense). (This follows from the 
completeness theorem for tableaux for propositional logic.) We thus have 


Theorem 1. Given a P-closed prenex tableau for S, we can construct a 
closed tableaux for S in which all applications of the quantificational rules 
precede all applications of the truth-functional rules. 

Our main theorem now is 


Theorem 2. (Completeness theorem for prenex tableaux). If a finite 
set S of prenex sentences is unsatisfiable, then there exists a P-closed 
prenex tableau for S. 


') This procedure is essentially that given in the Appendix to Quine [1]. 
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To prove Theorem 2, we modify (in the obvious manner) our “system- 
atic” construction of tableaux. Specifically, we start our tableau with the 
elements of S (in any order). This concludes the 0-th stage. Now suppose 
we have completed the n-th stage. If the tableau at hand is either P- 
closed, or if all lines which are y’s or 6’s have been used, then we stop. 
Otherwise we take the highest unused line which is a y or 0, and use it in 
the same manner as in the systematic procedure for ordinary tableaux. 
This concludes stage n+ 1. 

Suppose the tableau runs on infinitely without P-closing. We wish to 
show that the set K of sentences on the tableau is satisfiable. Clearly K 
has the following properties: 


P,: K is truth-functionally consistent (1.e. every finite subset of K is 
truth-functionally satisfiable). 

P,: If ye K, then for every parameter a, y(a)e K. 

P.,: If 6€K, then for at least one parameter a, d(a)eE K. 


We might call a set K having properties P,, P,, P, a P-Hintikka set. 
(Note that P,, P, are respectively conditions H,, H, and P, is a strength- 
ening of condition H, defining a Hintikka set.) We now obviously need 


Lemma. (Analogue for prenex sentences of Hintikka’s lemma). Every 
P-Hintikka set is (first-order) satisfiable. 
We first explicitly state and prove: 


Sub-lemma. Every quantifier-free set M which is truth-functionally 
satisfiable is first-order satisfiable. 


Proof of Sub-lemma. Let v be a Boolean valuation which satisfies M. 
Let v, be the restriction of v to all atomic sentences (thus vy is in an 
atomic valuation). We know that every atomic valuation can be uniquely 
extended to a first-order valuation, so let v’ be the first-order valuation 
which extends vy. Then v’ is also a Boolean valuation, and v’ agrees 
with v on the set M, of all atomic subformulas of elements of M. Therefore 
v’ agrees with v on M (this by induction, since Boolean valuations 
agreeing on X agree on ~ X, and 2 Boolean valuations agreeing on X 
and Y must also agree on X A Y, X v Y, and X > Y). Thus all elements 
of M are true under the first-order valuation v’, so M is first-order 
satisfiable. 


Proof of Lemma. Let K be a P-Hintikka set. Let Ky be the set of 
elements of K which contain no quantifiers. By hypothesis Po, all finite 
subsets of K are truth-functionally satisfiable, so obviously all finite 
subsets of K, are truth-functionally satisfiable. Thus by the Compactness 
Theorem for propositional logic, Ky is truth-functionally satisfiable. 
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Then by the sub-lemma, K, is first-order satisfiable. Let v be a first- 
order valuation which satisfies Ky. We assert that every element X of K 
is true under v. We prove this by induction on the number n of quantifiers 
of X. 


If n=0, then X € Ko, hence X is true under v. 


Now suppose that every element of K with (n—1) quantifiers is true 
under v. (a) Suppose ye K and y has n quantifiers. Then y(a,), y(a,),..., 
y(a,),..., are all in K, and they all have (n—1) quantifiers. Then by the 
inductive hypothesis, y(a,),..., y(a;),..., are all true under v. Hence y 
is true under v. (b) Suppose 6€K and 6 has n quantifiers. Then for at 
least one parameter a, 0(a)eK; also 6(a) has (n—1) quantifiers. Then by 
the inductive hypothesis, d(a) is true under v. Hence X is true under v. 
This concludes the proof. 


We have now shown that if a systematic P-tableau for S is infinite, 
then S is satisfiable. Suppose now that a systematic P-tableau for S$ 
terminates without P-closing (which, incidentally, can happen only if all 
quantifiers of the prefix are existential). Then S is satisfiable in the finite 
domain {a,,...,a,} of the parameters which were introduced (this by an 
obvious modification of the proof of the above lemma, which we leave to 
the reader). Thus if S is unsatisfiable, then the systematic P-tableau for S 
must P-close. This proves Theorem 2. 


Theorems 1 and 2 at once yield: 


Theorem 3. (Semantical version of Gentzen’s Extended Hauptsatz 
modified for tableaux). If a set S of prenex sentences is unsatisfiable, then 
there exists a closed tableau for S in which all applications of Rules C, D 
precede all applications of Rules A, B. 

By Theorem 3 and the fact that a closed tableau for S implies the 
unsatisfiability of S, we have 


Theorem 3’. (Syntactical version of Gentzen’s Extended Hauptsatz 
modified for tableaux). If there exists a closed tableau for S, where S is a 
set of prenex sentences, then there exists a closed tableau for S in which 
all applications of Rules C, D precede all applications of Rules A, B. 

Although Theorem 3’ is purely syntactic, we have proved it by a 
model-theoretic argument. It can also be proved by a purely syntactic 
argument. 


Discussion. It has occurred to us that the P-tableau method can be 
modified in such a manner that the corresponding completeness proof 
does not require any appeal to a systematic tableau. This can be done by 
incorporating the Henkin-Hasenjaeger idea in the following manner. 
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Consider the magic set .W of Chapter IX. Replace rule D by the 
following rule: 


Rule D’: 
0;(a;) 


Now consider a finite set S of prenex sentences. Let S* be the closure 
of S under operations C and D’—1.e. the intersection of all supersets of S 
which are closed under applications of rules C, D’. If S* is truth-func- 
tionally inconsistent, then S is unsatisfiable (why?). If S* 1s truth-func- 
tionally consistent, then S* is a P-Hintikka set (verify!), in which case S$ 
is satisfiable. Therefore S is satisfiable iff S* is truth-functionally con- 
sistent. Thus S is unsatisfiable iff S can be extended to a truth-functionally 
unsatisfiable set using only finitely many applications of Rules C, D’. 
Put otherwise, S is unsatisfiable iff there exists a P-closed prenex tableau 
for S using rules C, D’. This gives a completeness proof for this modified 
tableau system which does not appeal to any systematic construction. 


Chapter XIV 


More on Gentzen Systems 


In §1 of this chapter, we discuss Gentzen’s Extended Hauptsatz. 
In § 2 we establish a new form of this extension which does not appeal to 
prenex normal form. In § 3 we consider some variants of Gentzen systems 
which will play a key role in all 3 subsequent chapters. 


§ 1. Gentzen’s Extended Hauptsatz 


Suppose the sequent X,,...,X,— Y,,..., ¥, 1s provable in Y, and that 
X1,.0-,Xm» Yy,..-,¥% are prenex sentences. Then the set {TX,,...,TX,, 
FY,,...,F ¥,} is unsatisfiable. Hence by Theorem 3 of the last chapter, 
there is a closed analytic tableau for this set in which all applications of 
the quantificational rules precede all applications of the truth-functional 
rules. If we translate this tableau into a proof in of X,,...,X, 7 Y,,...,Y% 
(in the manner of Chapter XI), we obtain a proof in which all appli- 
cations of the truth-functional rules precede all applications of the 
quantificational rules (we recall that proof trees are displayed upside 
down!). We thus have 
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Theorem 1. (Gentzen’s Extended Hauptsatz). If U-V is provable in 
G*, where U, V are sets of prenex sentences, then there exists a proof of 
U-—V in @ in which all applications of the truth-functional rules precede 
all applications of the quantificational rules. 


§ 2. A New Form of the Extended Hauptsatz 


Now we consider a further extension of Gentzen’s Extended Haupt- 
satz which makes no appeal to prenex normal form. 

We let 9’ be the system obtained from @ by replacing the quantifi- 
cational rules by the following rules: 


yr U,o(a>V U-V,(Vx) p(x) 
a: UV 


providing (Vx) p(x) is a subformula of (some term of) U>V 

UV, g(a) U,(Vx)o(x)-V 
U-V 

providing the same as above and also that a does not occur in 

UV. 

UV,o(a) U,(4x)e(x)>V 
U-V 

providing that (4x) @(x) is a subformula of U- V. 


U,p(aj>V U-V,( 4x) p(x) 
UV 
with the same proviso as J and the same proviso as U5. 


? 


? 


9 


The quantificational rules of Y’ are in the spirit of cut rules (combined 
with the quantificational rules of Y), but proofs in Y nevertheless obey 
the subformula principle because of the proviso that (Vx) g(x) (respec- 
tively (4x) ~(x)) must be a subformula of UV. 

In uniform notation, the quantificational rules of Y’ are as follows: 


S,»(a)| |S.7 
CC; ———., 
S| 
providing y is a subformula of some element of S. 
pr. (8:5(a |8.3], 
S| 


providing 6 is a subformula of some element of S and a does not 
occur in any element of S. 
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By a normal proof in Y’ we shall mean a proof in which all appli- 
cations of the truth-functional rules precede all applications of the 
quantificational rules. We wish to prove 


Theorem 2. (A new form of Gentzen’s Extended Hauptsatz). Every 
valid sequent UV has anormal proof in’. 

We note that Theorem 2 1s asserted for all sequents UV, not just 
those in which the terms of U-V are prenex sentences. We will establish 
Theorem 2 as a consequence of the Fundamental Theorem modified for 
signed formulas as follows. 

We now use “y” and “6” for signed formulas, and “Q” for either 
some y or some 0. The notation Q > Q(a) now makes no sense, since we 
do not put logical connectives between signed formulas. We shall 


however define the signed formula Q=Q(a) as follows: 


T(Vx) p(x) > T O@) = ap T(VX) G(X) > G() 
F(V x) p(x) => F 9(@) = asT Gla) > (Vx) G(x) 
T(J x) p(x)>T @) = asT(A X) Q(X) > G(a) 
F(d x) o(x)=> F 9(@) = asT 9a) > (A x) G(x) 


Our definition of = is reasonable in the sense that under any inter- 
pretation, Q=Q(a) is true iff either Q is false or Q(a) is true. Now we 
define a regular set R of signed formulas in the same manner as for 
unsigned formulas, only replacing Q > Q(a) in the definition by O>Q(a). 
And similarly we define an associate R of a set S of signed formulas 
(only replacing “weak subformula” by “subformula”). Now if # is a 
closed analytic tableau for a set S of signed formulas, then the set R of 
all elements Q=Q(a) such that Q(a) was inferred from Q in ¥ is an 
associate of § (the proof is the same as the case for unsigned formulas). 

Now for the proof of Theorem 2. Let us first note that a set {S,0=>Q(a)} 
is truth-functionally unsatisfiable iff each of the 2 sets {5,0}, {S,Q(a)} 
is truth-functionally unsatisfiable; a set {S,Q,—>Q,(a,), Q.2=>Q,(a,)} is 
truth-functionally unsatisfiable iff each of the 4 sets {S,0,,0,}, 
{S,01,Q2(a2)}, {S,Q1(a1),Q2}, {S,Q1(41), Q2(a,)} is truth-functionally 
unsatisfiable—and in general, {S,Q,=>Q,(a,),...,0,—Q,(a,)} is truth- 
functionally unsatisfiable iff each of the 2” sets {S,A,,...,A,} is un- 
satisfiable, where A, is either 0, or Q,(a,), A, is Q, or Q,(a,), ..., A, is 
either QO, or Q,(a,). 

Now suppose a sequent UV is valid; let S be the set of signed 
formulas such that |S| is the sequent UV. Then S is unsatisfiable, so S 
has an associate R. We arrange R in a regular sequence (0,=>(Q,(a,), 
Q,=>0,(d)),...,0,>0,(4,)>. Letting A, be either 0, or Q,(a,),..., A, 
be either O, or Q,(a,), for each of the 2” choices of the sequence 
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<A,,A,...,A,», the set {S,A,,..., A,} is truth-functionally unsatisfiable, 
hence the sequent |S, A,,..., A,| is a tautology, and hence obviously has 
a normal proof in Y’. This means that for each of the possible 2"~* 
sequences (A),...,A,>, both |S,Q,,A2,.-.,A,| and |S,Q,(a,), Ao,..-, Aa 
have a normal proof in 9’. Then by an application of Rule C’ or D’ 
(depending respectively on whether Q, 1s some y or some 0) we obtain 
a normal proof of |S,A,...,.A,|. Thus for each of the 2"~* choices of 
A,,...,A,, the sequent S,A3,..., A, has a normal proof. This means 
that for each of the 2"? choices of A3,..., A, the sequent |S,Q5, A3,...,A,| 
and the sequent |S,Q,(a,), A3,..., A,| have normal proofs. Another appli- 
cation of either Rule C’ or D’ gives a normal proof of |S, A3,..., Aj]. 
Continuing in this manner, we finally obtain a normal proof of |S). 


§ 3. Symmetric Gentzen Systems 


In some of the inference rules of Y (more specifically the negation 
and implication rules) one transfers a formula from one side of the arrow 
to the other (or more accurately, one incorporates it into some formula 
on the other side). We shall need some Gentzen-type systems in which 
this does not happen. As a result, the systems to which we now turn will 
possess a valuable feature: In any proof of a sequent U-V, for each 
sequent U,—V, used in the proof, each term of U, will be a subformula 
of some term of U, and each term of V, will be a subformula of some 
term of V. We might refer to this condition as the 2-sided subformula 
principle. (By contrast, in a proof of U-V in Y, if U,V, is used in the 
proof, some term of U, may be a subformula of some term of V but not 
of U, or some term of V, may be a subformula of some term of U rather 
than of V.) 

The System #. We shall now consider sequents KL in which K, 
L are (finite) sets of signed formulas! The postulates of Y (in uniform 
notation) are as follows: 


Axioms: K,X-~L,X 
K,X,X-L where X is atomic 
K—->L,X,X 
Rules: (A) K,«,, a, 7L KL, B,, B, 
K,a-L K- L, B 


K,p,->L K,p,-L K-L,a, KoL, « 


B 
B) K,p>L K-L,a 


§ 3. Symmetric Gentzen Systems 125 


K, y(a)> L K-L, 0(a) 

(Cc) ———— ————_—_— 
K,yoL K-L,6 

(D) K,0(a)>L KL, y(a) 
K,o-L K>L,y 


(providing a does not occur in KL) 


We establish the completeness of Y as follows. By a variant of a 
sequent K—L we shall mean any sequent obtained from K-—L by trans- 
ferring any number of terms from one side of the arrow to the other but at 
the same time changing their signs. (Thus, e.g. TX, FY TZ is a variant 
of FZ,TX—-TY, also a variant of ~FX,TY,TZ, also a variant of 
TX —- TY, TZ.) Clearly if K'-L is a variant of KL, then both sequents 
are equivalent—i.e. true under the same interpretations. We note that 
for a set S of signed formulas, the sequent S— 1s equivalent to the sequent 
|S| (where terms are unsigned formulas). Thus S— is valid iff |S| is valid 
iff the set S is unsatisfiable. By a variant of the set S we shall mean a 
variant of the sequent S—, and we shall also refer to any such variant 
as a variant of |S]. 


Let us now consider the system in uniform notation. We know 
that Y is complete even restricting the axiom scheme |S, X,X | to the 
case that X is atomic. Now the set of axioms of is precisely the set of 
all variants of all these axioms |S, X,X |. And in any application of an 
inference rule of GY, if all variants of the premises are provable in Y, 
then all variants of the conclusion are provable in Y. It follows then by 
induction that all variants of all theorems of Y are theorems of Y. Now 
suppose that KL is valid. Then the set KUL is unsatisfiable (where 
by L we mean the set of conjugates of the elements of L). Then the 
sequent |K,L| (of unsigned formulas) is provable in Y (by the complete- 
ness of Y). But KL is a variant of |K, Ll. Therefore K—L is provable 
in Y. Thus F is complete. 


It is, of course, possible to have an alternative version “’ in which 
the elements of our sequents are unsigned formulas—just use the now 
familiar device of deleting all “T’’s and replacing all “F”s by “~”s in all 
terms of the sequents of the axioms and inference rules (and, of course, 
reinterpret “aw”, “B”, “y”, “do” accordingly). Then if a sequent K—L is 
provable in Y, its corresponding sequent UV (of signed formulas) is 
provable in “’. This gives the completeness of ’, because if X,,..., X, 
+ Y,,..., ¥, is valid, then TX,,..., 7X,—-T Y;,,..., T ¥, 1s provable in Y, 
hence X,,...,X,—7Y),---, % 18s provable in #. 

Exercise 1. Suppose we delete either the second axiom scheme 
K,X,X-—L or the third axiom scheme K,>L,X,X and also delete the 
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left halves of rules A, B, C, D or the right halves, but we add the postulate: 


K-L 
E: Tok 
Show that we obtain an equivalent system. 

The System S* of Stroke Sequents. It will prove convenient to 
consider another system “* even though it is little more than a notational 
variant of &. 

We shall use Sheffer’s stroke symbol “|” and define a stroke sequent 
as an ordered triple <K,|,L)—-which we write more simply as K|L. We 
define K|L to be true under an interpretation if at least one element of 
K U L is false. Stated otherwise, K|L is equivalent to the GENTZEN sequent 
K-—L. We now convert our system Y forGENTZEN sequents to a com- 
plete system Y* for stroke sequents by replacing in all postulates all 
GENTZEN sequents KL by the stroke sequent K|L. In detail, the 
postulates of Y* are as follows: 


Axioms. K,X|L,X 
K,X,X|L where X is atomic 
K|L,X,X 
K,a,,05\L K\L,a,,0 
Rules. — A: Kyo 020 A; — 
K,a|L K|L,a 
B . K, B,|L K, B,|L B . K|L, B, K L, B, 
- K, BIL > K|L,p 
K,y(a)| L — KIL, y(@) 
C.. Oe 
K,y|L K|L,y 
K,0(a)|L K|L,0(a 
D,: Ko@it ) D,: KIL, o(@) ) 
K,o|L K|L,6 


(providing a is new to the conclusion) 


Two sets are called incompatible if their union is unsatisfiable. It is 
obvious that KL is provable in Y iff K|L is provable in Y*. Hence if K 
is incompatible with L, then K—L is valid, hence provable in Y, and so 
K|L is provable in *. Thus Y* is complete in the sense that if K is 
incompatible with L (i.e. if K|Lis valid) then K|Lis provable in #*. 

The system S* is completely symmetric (the system SY might be 
aptly described as skew-symmetric!). We could, of course, have used just 
rules A,, B,, C,, D, (or alternatively A,, B,, C,, D,) and just one of the 
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second and third axiom schemata, had we added the postulate: 


K|L 
L|K 


The purpose of introducing the systems /,. /* will become apparent 
in the next three chapters. 


Chapter XV 


Craig's Interpolation Lemma and Beth's Definability Theorem 
§ 1. Craig’s Interpolation Lemma 


A formula Z is called an interpolation formula for a formula X > Y 
if all predicates and parameters of Z occur in both X and in Y, and if 
X>Z, Z>Y are both valid. Craig’s celebrated Interpolation lemma 
says that for any valid sentence X > Y: (i) if X, Y have at least one 
predicate in common, then there exists an interpolation sentence for 
X > Y; (ii) if X, Y have no predicates in common, then either Y is valid 
or X is unsatisfiable. 

If we adjoin the propositional constants t, f to our object language 
(cf. Exercise 2 end of Chapter I), then case (ii) can be subsumed under 
case (i) as follows. If Y is valid, then X > t,t > Y are both valid, so then t 
is an interpolation formula for X > Y. If X is unsatisfiable, then X = f, 
f> Y are both valid, so then f is an interpolation formula for X > Y. 

There is a corresponding interpolation lemma for propositional logic: 
If X > Y is a tautologous formula of propositional logic, then there 
exists a formula Z (again called an interpolation formula for X > Y) of 
propositional logic such that all propositional variables of Z occur in X 
and in Y and such that X > Z, Z> Y are both tautologies. [ For example, 
qg is an interpolation formula for (p A q)>(p v q).| 

Returning to First-Order Logic, a formula Z is called an interpolation 
formula for a sequent UV if every predicate and parameter of Z occurs 
in at least one element of U and at least one element of V and if both 
sequents U-Z, ZV are valid. Obviously Z is an interpolation formula 
for the sequent X,,...,X,—-Y;,.--, Y, iff Z is an interpolation formula for 
the sentence (X,A---A X,)>(%v---v Y,), so the existence of interpola- 
tion formulas for all valid sequents is equivalent to the existence of inter- 
polation formulas for all valid sentences X > Y. So we shall consider 
Craig’s lemma in the equivalent form that there exist interpolation 
formulas for all valid sequents. 
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Proof of Craig’s Lemma. We can obtain the interpolation lemma as a 
consequence of our Unifying Principle as follows: Define '(S) to mean 
that there exist two sets S,, S, such that S=S,U S,, and there exists 
no interpolation formula for the sequent S,—S,. (Equivalently, S is 
T’-inconsistent if for any two sets $,,S, such that $,U S,=S, there exists 
an interpolation formula for S,—S,.) Then Craig’s lemma can be 
obtained by verifying that this I is an analytic consistency property. 
However, it is a bit more direct to use the results of Exercise 2, end of 
Chapter VI, and define Ut V to mean that there exists an interpolation 
formula for the sequent UV, and then verify that | is a symmetric 
GENTZEN relation. This is really tantamount to taking the symmetric 
GENTZEN system / (which we introduced in the last chapter) and 
showing: (i) there exists an interpolation formula for all the axioms; 
(ii) in any application of an inference rule, if there exist interpolation 
formulas for the premises, then there exists an interpolation formula for 
the conclusion. This is the course we shall take. Also our proof will be 
wholly constructive in the sense that we shall specify outright interpola- 
tion formulas for the axioms, and for any application of an inference rule, 
given interpolation formulas for the premises, we explicitly exhibit inter- 
polation formulas for the conclusion. Thus given any proof of U-V 
in “, an interpolation formula for U-V can be explicitly found. This 
implies (by earlier results) that given any closed tableau for U-V, an 
interpolation formula for U—V can be explicitly found. 

It makes no great difference whether we work with the system 
(which uses signed formulas) or the system S' (which uses unsigned 
formulas) (cf. remark below). Perhaps it might be a bit easier to first 
work with #. 

Now for the proof. We shall write U*V to mean that X is an inter- 
polation formula for U-V. 

Verification for the Axioms. It 1s obvious that X is an interpolation 
formula for U,X-V,X; f is an interpolation formula for U,X,~ XV; 
t is an interpolation formula for U-V,X,~ X. In other words we have: 


(i) U,X4V,X 
(ii) U,X,~X4V 
(iii) U-V,X,~X 


Verification for the Truth Functional Rules. 


A: If U,a,,0,4V, then also U,a+V. 
If U4V,B,,B, then also U+V, fp. 

B: IfU,B,%V and U,B,-SV, then U, B*“4 V. 
If USV,a, and USV,a,, then USV,«. 
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Before proceeding further, let us note that we have now proved 
Craig’s lemma for propositional logic (because the system /' without 
rules C, D constitutes a complete system for propositional logic). 

Verification for the Quantificational Rules. 

C: Suppose U,)(a)“V. Then certainly U,yp>X and X-V are both 
valid, but X may fail to be an interpolation formula for U,y—V, because 
the parameter a might occur in X but not in U,+. If a doesn’t occur in X, 
then X will be an interpolation formula for U,y>V. Or if a occurs in 
U,y then X is still an interpolation formula for U,y—V. Ifa occurs in X 
but not in U,y, then take any variable x which does not occur in _X, and 
let X° be the result of substituting x for every occurrence of a in X. 
Then (Wx)X% will be an interpolation formula for U,y-V. Reason: 
(Vx) X% is a sentence y’ of type C and a does not occur in y’ and y'(a)=X. 
We already know that U,y—y’'(a) (which is the same as U,y— X) is valid, 
but since a does not occur in U,y,7’, then U,y—’ is valid (indeed U, yy’ 
is derivable from U,y—y’'(a) by one application of Rule D of our system 
S').Thus U,y—y’' is valid. Also y’(a)- V is valid (by hypothesis), so y’+V 
is valid (cf. Rule C of ’, taking K to be empty). Thus, U,y-y’' and y’>V 
are valid, and certainly all predicates and parameters of y’ are both in 
U,y and in V (because a does not occur in y’). Thus y’'—1.e. (V x) X2—is 
an interpolation formula for U,y— V. 

The reader can similarly verify that if U4V,6(a), then (i) if a does 
not occur in X, or if a occurs in X and in V,6, then U4 V, 6; (ii) if a occurs 
in X but not in V,6, then UGax= , V~0. 

D: Suppose U,6(a)“V, and that a does not occur in U,6, V. Then a 
cannot occur in X either, hence U, 6% V. 

Likewise if UV, (a), then also U4V,y. This completes the proof. 


Remark. If we prefer to work with sequents UV whose terms are 
signed formulas, then the easiest way to modify the above proof is to 
define an unsigned formula X to be an interpolation formula for U-V 
if the signed formula TX is an interpolation formula for U-V. Then 
given a proof of UV in the system, we can find an unsigned interpola- 
tion formula X for U, V exactly as in the proof for “’, and then TX will 
be a (signed) interpolation formula for UV. 

Also, if we work with S rather than ¥’, we could have halved our 
labor, appealing to Exercise | of the last chapter. Checking for Postulate E 
is trivial; if X is an interpolation formula for U-V, then ~X is an 
interpolation formula for V-U. 

Exercise 1. Let us define a Craig-sequent as an ordered triple (U, X, V), 
where U, V are finite sets of sentences and X is a single sentence, and X 
is an interpolation formula for U, V. Let us also write U>X-V for 
(U, X, V). Now consider the following axiom system for Craig sequents: 
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Axioms: U,X~X—-V,X 


U,X,X>f>V 
UstoV,X,X 
U,a,,0, 7X OV U-X-V,,,B, 
Rules: A: ——-_—_- << 
U,a- XV U-~X-V,B 
B- U,pB,2~X-V U,p,- YoV U-X>V,a, U-Y->V,a, 
, U,B3X v YoV U-X AY>V,a 
C: U,yajypo xo V U-X-V,6d(a) 
© U,yo XV U-X-V,6 
providing that either a does not occur in X or that a occurs 
in U,y or V,0 
U,y(a)>y' (a) V U-+0'(a)>, 0(a) 
U,yoyo~V U0’ V,6 
providing that a does not occur in the conclusion 
D: U,d(aypo> X > V U-X-—V,y(a) 
~ U,69X>V UX V,y 


providing that a does not occur in the conclusion. 


Now define X to be a special interpolation formula for UV if the Craig 
sequent U->X-—V is provable in the above system. Show that if U-V 
is valid, then there exists a special interpolation formula for UV. 

Exercise 2. The following conditions recursively define the notion 
of a predicate occurring positively in a formula and negatively in a 
formula: 

(1) P occurs positively in an atomic formula Pa,,...,a,; P occurs 
negatively in ~ Pa,,...,Q,- 

(2) If P occurs positively (negatively) in «, or in a, it occurs posi- 
tively (respectively negatively) in «; If P occurs positively (negatively) 
in B, or in B,, it again occurs the same way in f. 

(3) If P occurs positively (negatively) in y(a), it occurs the same way 
in y. Likewise with “6” in place of “y”. 

It is possible for a predicate to occur both positively and negatively in 
the same formula—e.g. P occurs both positively and negatively in the 
formula (Pav ~ Pb). 

Now call an interpolation formula X for UVa Lyndon interpolation 
formula (for UV) if every predicate which occurs positively in X occurs 
positively in both U and V, and every predicate which occurs negatively 
in X occurs negatively in both U and V. Prove Roger Lyndon’s stronger 
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form of Craig’s Interpolation Lemma (sometimes known as the CRAIG- 
LYNDON interpolation lemma): For any valid sequent U-—V there 
exists a LYNDON interpolation formula. (Hint: Show that every special 
interpolation formula for U— V is a LYNDON interpolation formula for 
UV. 

Exercise 3. A (unsigned) formula Y is said to be in negation normal 
form if “>” does not occur in Y and if all occurrences of negation signs 
immediately precede atomic formulas. Show that every unsigned formula 
X is equivalent to a formula Y in negation normal form. Hint: Verify and 
use the following equivalences: 

~~X~X 
~(XAY)~~XvV~Y 
~(XVY)~~XAn~Y 
XD>Yx2~XvY 

~ (Wx) X ~(Ax)~X 
~(dx)X ~(Vx)~ X 

Now suppose X is equivalent to Y where Y 1s in negation normal form. 
Prove that a predicate P occurs positively in X iff P has at least one 
occurrence in Y which is not immediately preceded by a negation sign, 
and that P occurs negatively in X iff P has at least one occurrence in Y 
which is immediately preceded by a negation sign. 


§ 2. Beth’s Definability Theorem 


One important use of Craig’s Interpolation Lemma is that it yields a 
remarkably elegant proof of Beth’s Definability Theorem which we now 
discuss. 

Consider a set A of closed formulas without parameters. Let us refer 
to A as a (first-order) theory. We refer to the elements of A as the axioms 
of A. For the time being, let A be finite. We write A+ X to mean that X 
is true in all interpretations which satisfy A, or equivalently that there 
exists a closed tableau for {A,~X}, or equivalently that the sequent 
AX is provable, or equivalently that if we adjoin the elements of A 
as additional axioms of the system Q,, then X becomes provable. If any 
of these-equivalent conditions hold, then X is said to be a theorem of 
the theory A. 

Now let P, P,,...,P,, be the predicates which occur in A, and let us 
presently assume that P is of degree one. P is said to be explicitly definable 
from P,,...,P, in the theory A if there exists a formula (x) with just one 
free variable x, whose predicates are all in the set P,,...,P,, (so P is not a 
predicate of g(x)) and such that 


At(Vx)[ P(x)? g(x) ], 
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And such a formula @(x) is said to constitute an explicit definition 
of P from P,,...,P,, in the theory A. 

Now we say that the axioms of A implicitly define P from P,,...,P, 
or that P is implicitly definable from P,,...,P,,1n the theory A if the follow- 
ing condition holds: Take a 1-place predicate P’ which does not occur 
in A, and let A’ be the result of substituting P’ for P in every element of A. 
Then P is called implicitly definable from P,,...,P, in A if 


AVUA'E(Wx)[ P(x) P’(x) | 


Using the completeness theorem, this condition is equivalent to the 
condition that any two interpretations of P,,...,P,, P which satisfy A 
and which agree on P,,...,P,, must also agree on P—or stated otherwise, 
given any values of P,,...,P,, there is at most one value of P which 
satisfies the axioms of A. (Why is this equivalent?) 

It is obvious that if A defines P explicitly from P,,...,P,, then it 
defines P implicitly from P,,..., P,,. For suppose P is explicitly definable 
from P,,..., P, in A. Then we have At (Vx) [ P(x) ¢(x)]. Then of course, 
we also have (for any new predicate P’) A’t(Vx)[P’(x)@(x)]. Hence 
AVUA'E (Wx) [P(x)e(x)] A (Vx) [P'(x) e(x)], hence AUA'E(Vx)[ P(x) 
«+ P'(x)| (why?). 

Beth’s definability theorem says the converse—i.e. if A implicitly 
defines P from P,,..., P,, then A explicitly defines P from P,,..., P,. 

Now we shall prove Beth’s theorem using Craig’s lemma. Without loss 
of generality, we can assume that A consists of just one sentence (other- 
wise we can work with the conjunction of the elements of A). Thus we are 
given A, A’H(Wx)[ P(x)P’(x) |. Since the sequent A, A’>(Vx) [ P(x) P(x) | 
is valid, so is the sequent A, A’—(P(a)<>P’(a)) (for any parameter a). 
Hence the sequent A, A’-(P(a) > P(a)) is valid. This sequent is truth- 
functionally equivalent to the sequent A, P(a)—(A’> P’(a)), hence this 
latter sequent is valid. In this sequent P does not occur on the right and 
P’ does not occur on the left. Now we take an interpolation formula X 
for A, P(a)>(A'> P’(a)). Since all predicates of X occur both on the left 
and right side of the sequent, then P does not occur in X—indeed all 
predicates of X are in the set P,,..., P,. Also X contains no parameters 
except (possibly) a; let x be a variable new to X and let o(x)= X%, so that 
¢(a)= X. Then (a) is an interpolation formula for A, P(a)(A'> P’(a)). 
Hence 

(1) A, P(a)t g(a) 

(2) g(a)F(A'> Pa). 
From (1) we have At(P(a) > g(a)). From (2) we have A’t(g(a) > P’(a)). 
Hence also At(@(a) > P(a)). Hence At(P(a) > g(a)) and At ((g(a) > P(a)), 
so At(P(a)¢(a)). Therefore At(Vx)[P(x)@(x)], so that p(x) does 
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explicitly define P from P,,..., P, in the theory A. This concludes the 
proof of Beth’s theorem. 

Exercise. Show Beth’s theorem for the case that A is a denumerable 
set (interpreting A+ X to mean that X is true in all interpretations which 
satisfy A, or equivalently that for some finite subset A, of A, the sequent 
A,y—X is provable). 


Chapter XVI 


Symmetric Completeness Theorems 


In this chapter we establish some new and stronger versions of com- 
pleteness theorems considered earlier. These are closely related to Craig’s 
Interpolation lemma, and they will play a key rdle in our final chapter 
on linear reasoning. 


§ 1. Clashing Tableaux 


Suppose we jointly construct a pair (4,,-4%4,) of analytic tableaux, 
JF, for a finite set S, and ¥Y, for a finite set S,, alternating between the 
constructions (though not necessarily methodically—i.e. we may carry 
out any finite number of steps on one tree, then any finite number of 
steps on the other, then back to the first, etc.), and respecting Rule D in 
the sense that if d(a) is inferred from 6 in either tree, the parameter a 
must be new to both trees. Call such a pair (4,, 4,) a joint pair of tableaux 
for S,,S, or for S,|S5. 

If the reader would like us to be more precise, then by a joint pair 
(%,,.4,) for S,,S,, we mean a pair constructed as follows: we start 4, 
with the set S, (in any order) and ¥, with S, (in any order). Now suppose 
(%,,.%,) is a joint pair for S,,S, already constructed. Then we may 
extend the pair by either of the following operations: 

(1) If .% is an immediate extension of 4, by Rule A, B,or C, then (.4,.4,) 
is a joint pair for S,,S,; if 4% is an immediate extension of .4, by Rule 
A, B, or C, then (4, 4%) is a joint pair for S,,S,. 


, . ”) 
(2) If 4% is an immediate extension of ¥, by an application 5a) of Rule D, 
and if a is new both to -¥, and to 4, then (4, 4%) is a joint pair for S,,S). 
, , , oo. 0 
Likewise, if .4 is an immediate extension of 4, by an application 5a 
a 


of Rule D and if a is new to both ¥, and 4%. 
This defines the notion of a joint pair (.4,,.4,) of tableaux for S,,S5. 
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We shall say that two sets clash—or that one clashes with the other— 
if their union contains some atomic element and its conjugate. We shall 
say that 4%, clashes with .4,—or that 4,,.4, clash—if every branch of 4, 
clashes with every branch of .4,. And by a clashing pair of tableaux for 
S,,S,, we mean a joint pair (4,,.4%,) of tableaux for S,,S, such that 4, 
clashes with 4,. 

It is obvious that if there exists a clashing pair (.4,,.4%,) for S,,S,, 
then S,US, must be unsatisfiable (why?). We now wish to prove the 
converse (which is sort of a “double analogue”— or a “symmetric form”— 
of the completeness theorem) viz. that if S, US, is unsatisfiable, then 
there exists a clashing pair (4,, 4.) for S,,S>. 

We could, of course, prove this model-theoretically by making the 
appropriate changes in our completeness proof for analytic tableaux. 
More specifically, it should be obvious how to modify our systematic 
constructions of single tableaux to systematic constructions of joint pairs 
of tableaux. Now if we systematically construct a joint pair for S,,S, 
and if after no finite stage do we obtain a clash, then we get two trees 
J,,¥%, (either or both of which may be infinite) and an open branch B, 
of ¥, and an open branch B, of .% such that B, does not clash with B,. 
Then B,UB, will be a Hintikka set, hence $,US, will be satisfiable. 
Thus if S, US, 1s unsatisfiable, then a systematically constructed pair for 
S,,S, must eventually clash. 

To carry out the above proof in detail essentially involves repetition 
of the labor of our completeness proof for single tableaux. Alternatively, 
we can obtain our completeness theorem for pairs of tableaux as a 
consequence of our Unifying Principle as follows: Define I'(S) to mean 
that there exist sets $,,5, such that S, US,=S and such that there exists 
no clashing pair (.4,, 4,) for S,,S,. Then verify that this I is an analytic 
consistency property. 

Either of the above methods establish: 


Theorem 1. If S,US, is unsatisfiable, then there exists a clashing pair 
(F,, 42) for S1,S. 
Theorem 1 of course implies 


Theorem 1’. If there is a closed tableau ¥ for §,US,, then there is a 
clashing pair (4,,-4,) for S;,S>. 

We will shortly discuss a purely: syntactic proof of Theorem 1’. 

One can of course consider joint pairs of tableaux for propositional 
logic—just ignore rules C, D. Clashing tableaux provide a pleasant proof 
procedure. We shall consider two examples—the first from propositional 
logic, the second from Quantification Theory. By a clashing pair for a 
sequent X,,...,X,—Y;,,..., ¥,, we shall mean a clashing pair for 
({TX,,...,TX,}, (FY, ..., FY;,}). 
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Example 1. The following is a clashing pair for p> qg,q>rop2>r: 


Tp>q Fp>r 

Tq>r T p 

Fp Tq Fr 
Fq|Tr 


Example 2. The following is a clashing pair for the sequent 
(V x)(Px>Qx),(Vx)Px>(Vx)Qx: 


(1) TW x)(Px>@Qx) (3) FW x)Qx 
(2) T(Wx)Px (4) FQa 
(5) TPa 


(6) TPa>Qa 
(7) FPal(8) TQa 


Note that (8) is the conjugate of (4); (7) is the conjugate of (5). 

Clashing Block Tableaux. It is obvious how we should define a joint 
pair <7 ,,7 ,» of block tableaux or of modified block tableaux for S,,S,, 
and how to obtain a clashing pair of modified block tableaux for S,,S, 
from a clashing pair of analytic tableaux for S,,S,. Theorems 1 and 1’ thus 
hold if 4,,.4,.% are modified block tableaux rather than analytic 
tableaux. 


A Constructive Proof of Theorem 1°. Though Theorem 1’ is purely 
syntactic, the preceding proof is model-theoretic (since it appeals to the 
notion of validity). We now wish to sketch an effective procedure for 
transforming a closed tableau for S, US, into a clashing pair for S,,S,. 
To this end, the symmetric system / will be useful. Given a closed 
tableau for S,;US,, we know how to obtain a proof of the GENTZEN 
sequent S,->S, in Y, and hence trivially how to obtain a proof of S,|S, 
in S”. The problem then reduces to showing how from a proof of S,/S, 
in “’, we can obtain a clashing pair (.4,, 4%) of tableaux for S |S 2. 

This is done by showing that there exists a clashing pair for each 
axiom of #*, and in any application of the inference rules, if there are 
clashing pairs for each premises, then there is a clashing pair for the 
conclusion. We remark that only the left halves A,,B,,C,,D, of rules 
A, B, C, D need be checked, if we use Postulate E. And Postulate E can 
be immediately checked by noting that if (4,,.4,) is a clashing pair for 
S,|S,, then (4,,.4,) is a clashing pair for S,|S,. We rely on the reader to 
check on the details of the proof. Having done this, we obtain (via the 
system ') an effective procedure for obtaining a clashing pair for S,,S, 
given a closed tableau for S,US,. 
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§ 2. Clashing Prenex Tableaux 


Let S,,S, be finite sets of prenex sentences. By a joint pair (4,,.4%) 
of prenex tableaux for S,|S, we mean a pair of trees constructed using 
just rules C, D of the preceding section. And we say that 4,,.4% are 
P-clashing if for every branch B, of .4, and every branch B, of .4,, the 
set B, UB, 1s truth-functionally unsatisfiable. 

We leave it to the reader to give an appropriate definition of a system- 
atic pair (4,,.4,) for S,|S,, and to show that if (4,,.%) is a completed 
systematic pair for S,|S, which is not P-clashing, then for any branch 
B, of ¥, and any branch B, of .¥, such that B, UB, 1s truth-functionally 
satisfiable, B, UB, is a P-Hintikka set. And P-Hintikka sets are satis- 
fiable (cf. §2 of Chapter XII). Thus we have 


Theorem 2. If U|V is valid, where U, V are sets of prenex sentences, 
then there is a P-clashing pair of prenex tableaux for U|V. 
We leave it to the reader to show that Theorem 2 implies. 


Theorem 2’—(A symmetric form of Gentzen’s Extended Hauptsatz)— 
If UV is provable in the system Y, where U,V are sets of prenex 
sentences, then UV has a proof in Y in which all applications of truth- 
functional rules precede all applications of quantificational rules. 


§ 3. A Symmetric Form of the Fundamental Theorem 


We shall call an ordered pair <R,,R,> a joint associate of an ordered 
pair <S,,S,> if the following conditions hold: 
(1) R, UR, is an associate of the set S$, US,. 
(2) For each element Q, > Q,(a,) of R,,Q, is a weak subformula of 
some element of S,, and for each element Q, > Q,(a,) of R,,Q, is a 
weak subformula of some element of S,. 

We wish to prove: 


Theorem 3. (A Symmetric Form of the Fundamental Theorem). If 
S, US, is unsatisfiable, then there is a joint associate (R,, R,> of <S,,S5). 

One proves Theorem 3 using the Completeness theorem for clashing 
tableaux (Theorem 1) in much the same way as one proves the Funda- 
mental Theorem using the Completeness theorem for (single) tableaux. 
To be specific, let (4,,.4,) be a clashing pair of tableaux for S,,S,. Let 
R, be the set of all Q, > Q;(a,) such that Q,(a,) was inferred from Q, 
in ¥,; let R, be the set of all Q, > Q,(a,) such that Q,(a,) was inferred 
from Q, in Y,. Then ¢R,,R,> is a joint associate of <S,,5,> (verify!). 

We remark that Theorem 3 holds both for unsigned and signed for- 
mulas (for the latter we must, of course, in our definition of joint associate 
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everywhere replace “Q > Q(a)” by “Q=Q(a)” and “weak subformula” 
by “subformula” (cf. §2 of the preceding chapter). 


A Stronger Form of the Fundamental Theorem. We now discuss a 
still stronger form of both the Fundamental Theorem and the Symmetric 
Form of the Fundamental Theorem. 

We wish to simultaneously consider the treatment for both signed 
and unsigned formulas. Accordingly, if Q is a signed formula, we define 
Q=Q(a) in the manner of §2 of the last chapter; if Q is an unsigned 
formula, then we shall take Q=>Q(a) to be Q > Q(a). 

By a Boolean descendent of a formula X we shall mean a descendent 
of X in the sense of propositional logic (cf. Chapter III])—i.e. the set of 
Boolean descendents of X is the smallest set which contains X and which 
contains with each a, both «,,a,, and with each f both f,,f,. For 
unsigned formulas, every Boolean descendent of X is also a weak 
Boolean subformula of X, but not conversely. For signed formulas, 
every Boolean descendent of X is a subformula of X, but not conversely 
(we call a signed formula 2, X ,—-where z, is “T” or “F”—a subformula 
of x, X, if X, is a subformula of X,). 

Now we shall call R a strong associate of S if R is an associate of S, 
and if in addition, R can be arranged in a regular sequence 


0 ,=>Q,(a,), tery 0,=>O,(an) 


such that Q, isa Boolean descendent of some element of S, 0, is a Boolean 
descendent of some element of {S,Q,(a,)!,...,Q, is a Boolean descendent 
of some element of {S,Q,(a,), ...,Q,—1(@n—1)}. 

Now suppose -¥ is a closed analytic tableau for S. Let R be the asso- 
ciate of S obtained from 4% by the method of §3 of Chapter VII—i.e. R 
is the set of all formulas Q=Q(a) such that Q(a) was inferred from Q on 
the tableau .¥. We assert that R is not only an associate of S, but even a 
strong associate of S. We can see this as follows. 

Let Q,,Q>,,...,Q, be the y- and 6-formulas which were used in the 
construction of ¥% and in the order in which they were used. Let 
Q ,(a,),...,Q,(a,) be the formulas which were respectively inferred from 
Q,,...,Q, (thus R can be arranged in the regular sequence <0,>Q,(a,), 
...5 0,=>Q,(a,)>). Now before Q, was used, only truth-functional rules 
were applied in %, hence Q, must be a Boolean descendent of some 
element of S. Now let S, be the set of all formulas which occur on the 
tableau as of the stage that Q,(a,) was first inferred from Q,. No further 
application of a quantificational rule was made until we inferred Q,(a,) 
from Q,; therefore Q, must be a Boolean descendent of some element 
of S,. But every element of S, except possibly Q,(a,) is a Boolean des- 
cendent of some element of S. And any Boolean descendent of a Boolean 


138 XVI. Symmetric Completeness Theorems 


descendent of some element of S is again a Boolean descendent of some 
element of S. Therefore Q, must be a Boolean descendent of some 
element of {S,Q,(a,)}. Similarly Q; is a Boolean descendent of some 
element of {S,Q,(a,), Q,(a,)},...,Q, is a Boolean descendent of some 
element of {S,Q,(a,),..., Qn—1(@,-1)}. Thus R is indeed a strong asso- 
ciate of S. 

An analogous result goes through for the symmetric version. We 

define <R,,R,> to be a strong joint associate of <S,,S,) if: 

(1) R, UR, is an associate of S, US). 

(2) R, can be arranged in a regular sequence <Q ,>Q,(a,),...,0,—>Q,(a,)> 
such that for each i<n, Q;,, is a Boolean descendent of some element 
of {S,,Q,(a,), ..., Q;(a,)}—and similarly R, can be arranged in a regular 
sequence bearing the same relationship to S,. 

Now, if (4,,.4%,) is a clashing pair for S,,S,, and if R, is the set of 
all Q=>Q(a) such that Q(a) was inferred from Q on .4,, and if R, is the 
set of all Q=Q(a) such that Q(a) was inferred from Q in .4,, then the 
reader can verify that (R,,R, > is a strong joint associate of ¢S,,S,>. 

We have thus proved 


Theorem 3*. (a) If S is unsatisfiable, then S has a strong associate. 
(b) If S, US, is unsatisfiable, then <S,,S,)> has a strong joint associate. 

Applications. Consider the Hilbert-type axiom system Q% of Chapter 
VIII. Suppose we weaken the inference rules by requiring that Q be not 
only a subformula of X, but a Boolean descendent of X. The resulting 
system would still be complete by virtue of (a) of Theorem 3*. 

Next we consider the following “symmetric” version of this system 
which we will term “QQ”. We shall use Sheffer’s stroke symbol (it is not 
too important whether it is taken as an additional primitive or defined 
in terms of the logical connectives). 


Axioms: All tautologies of the form X| Y. 


Rules:c. (I 2r@lr X)|Y X|([y > y(@)] 4 Y) 
xX | Y xX | Y 
providing y is a Boolean providing y is a Boolean 
descendent of X descendent of Y 
», (52> 9a) AX)1¥ X|((5>5(@)] 4 ¥) 
Xx | Y xX | Y 
providing 6 is a Boolean providing 6 is a Boolean 
descendent of X anda descendent of Y and a 


does not occur in X|Y | does not occur in X|Y 
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The system QQ is complete in the sense that for any two sentences 
X, Y which are incompatible, X|Y is provable in QQ. This is proved 
using (b) of Theorem 3* in virtually the same manner as we proved the 
completeness of the system Q using the Fundamental Theorem. 

The system QQ could have been alternatively presented as a GENTZEN 
type system of stroke sequents as follows (the system works if U, V are 


construed as sets of signed or unsigned formulas). 


Axioms: All tautologies U|V. 


U, V UlV, 
Rules: C: pa eel Aes (a) Ul¥.7 > 9a) y2 14) 
U| V U | V 
providing y is a Boolean providing y is a Boolean 
descendent of some descendent of some 
element of U element of V 
D: U,d>d(a)|V U|V,6 > d(a) 
) U|V U|V 


providing 6 is a Boolean 
descendent of some 
element of U and a does 
not occur in U|V 


providing 6 is a Boolean 
descendent of some 
element of V and a does 
not occur in U|V. 


The system QQ in the above Gentzen-type formulation is complete in 
the sense that every valid stroke sequent is provable. 

The completeness of the system QQ affords another proof of Craig’s 
Interpolation lemma, reducing it to the case for Propositional Logic. 
(Craig’s lemma for propositional logic can be proved in a different 
method—perhaps more simple—than that of the preceding chapter; we 
shall do this in the next chapter.) First of all, by an interpolation formula 
for a stroke sequent U|V we shall mean a formula X such that all predi- 
cates and parameters of X occur both in U and in V, and U-X, 
V —X are both valid. Alternatively, an interpolation formula for a stroke 
sequent U|V is the same as an interpolation formula for the Gentzen 
sequent UV (because the validity of XV is equivalent to the validity 
of VX). Thus the existence of interpolation formulas for all valid stroke- 
sequents is equivalent to the existence of interpolation formulas for all 
valid Gentzen sequents. 

Now, assume the Interpolation Lemma for propositional logic. To 
prove the Interpolation Lemma for First Order Logic, it suffices (by 
virtue of the completeness of QQ) to show that there is an interpolation 
formula for each of the axioms, and in any application of an inference rule, 
if there is an interpolation formula for the premise, then there is an 
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interpolation formula for the conclusion. Since we are taking all tauto- 
logies as axioms, then the existence of interpolation formulas for all 
axioms is simply the interpolation lemma for propositional logic. Now 
for the inference rules: 

C: Suppose X is an interpolation formula for U,y > y(a)| V, where y 
is a Boolean descendent of (some element of) U. We assert that if a does 
not occur in X, or if a does occur in some element of U, then X is an 
interpolation formula for U|V; if a does not occur in U but does occur 
in X, (Wx) X% is an interpolation formula for U|V (where x is any variable 
which has no free occurrence in X). To verify this, the key point is that 
since y is a Boolean descendent of some element of U, then not only does 
every predicate of y occur in U (which would be the case even if y were 
only a descendent of U) but also every parameter of y occurs in U. The 
detailed verification is as follows. Since U,y > y(a)—>X is valid, so is 
U-—X (because y= (a) is valid). And we are given that V>~X is 
valid. Suppose that a does not occur in X or that a occurs in U. Every 
predicate P of X occurs in U or in y > y(a); if P occurs in y > y(a) then P 
occurs in y, and hence in U. So all predicates of X occur in U. As for the 
parameters, we are assuming that if ais in X, it is also in U. Now consider 
any parameter b of X distinct from a. We know that b is in U or in 
y > y(a). Suppose b is in y > y(a). Then b must be in y or in y(a). Since a 
is the only parameter which could be in y(a) but not in y, then bey. But 
all parameters of y are in U. Thus be U. So all parameters of X are in U, 
hence X is indeed an interpolation formula for U|V. 

Now consider the case that a is in X but not in U. Since U-X is 
valid and a does not occur in U, then U->(Vx) X2 is valid. Since V> ~ X 
is valid, then V> ~(Vx) X$ is valid. Every predicate of (Vx) X? is also a 
predicate of X, and we already know that all predicates of X are in both 
U and V. As for the parameters, let b be any parameter of (Vx) X%. Then 
ba (because a does not occur in (Vx) Xf. Since b occurs in (Wx) X%, 
then b occurs in X. Hence b occurs in {U,y > y(a)}. Then b must occur 
in U for the same reason as before. Also b occurs in V, since it occurs in X. 
Thus we have all the conditions of (Vx) X¢ being an interpolation formula 
for U|V. 

We have thus verified the left half of Rule C. The right half then easily 
results by the following argument. Suppose there is an interpolation 
formula X for U|V,y> (a) and that y is a Boolean descendent of V. 
Then ~X is an interpolation formula for V,y > y(a)|U. Hence by our 
previous argument for the left half of Rule C, there is an interpolation 
formula Y for V|U (Y is either ~X or (Wx)(~X)*). Then ~Y is an 
interpolation formula for U|V. 

D: Suppose X is an interpolation formula for U,d > 6(a)|V and that 
6 1s a Boolean descendent of U, and that a does not occur in U nor V. 
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Then X is an interpolation formula for U|V. Reason: Since all parameters 
of X occur in V and a does not occur in V, then a does not occur in X. 
Now, U,6 > 6(a)— X is valid and a does not occur in U nor X, hence 
U-—X is valid. All predicates of X are in U by the same argument 
as for Rule C. Let b be any parameter of X. Then ba, and b must 
occur in U by the same argument as for Rule C. Also, of course, 
V— ~X 1s valid and all predicates and parameters of X occur in V. So X 
is an interpolation formula for U|V. This proves the left half of Rule D. 
The right half is then derivable from the left half in a manner similar to 
the argument for Rule C. 


Chapter XVII 


Systems of Linear Reasoning 


In Craig’s paper “Linear Reasoning” [1] he considered a system of 
Quantification Theory in which there are no axioms, but only inference 
rules, and all rules are 1-premise rules. In each of these rules, the premise 
validly implies the conclusion. By a derivation of Y from X in the system 
is meant a finite sequence of lines 


such that for each i<n, the line X,;,, is a direct consequence of the 
preceding line X, by one of the inference rules. 

His system is complete in the sense that for any conjunction X of 
prenex sentences and any disjunction Y of prenex sentences, if X > Y is 
valid, then there exists a derivation of Y from X—moreover one in which 
some intermediate line X; is an interpolation formula for X= Y! 
(This constituted the first known proof of Craig’s interpolation lemma. It 
was subsequent authors who extricated the proof of the interpolation 
lemma from the completeness theorem for Craig’s system of linear rea- 
soning, the latter being a far more complicated matter.) 

In this chapter, we will not study Craig’s original system, but will 
rather present other systems of linear reasoning which arise very naturally 
from the tableau point of view. The system which we first consider— 
which we tend to regard as the “basic” system—does not require appeal 
to prenex normal form. We obtain yet another approach to propositional 
logic and quantification theory, somewhat like tableaux, but without use 
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of trees. The completeness proof for the system is based primarily on the 
completeness theorem for clashing tableaux which we proved in the last 
chapter. Then we consider some alternative systems based on our 
previous results on P-clashing tableaux and the strong symmetric form 
of the fundamental theorem. 


§ 1. Configurations 


By a configuration @ we shall mean a finite collection of finite sets of 
sentences. If @={B,,...,B,} we also write @ in the form 


and we refer to the elements B,,...,B, of @ as the blocks of the configu- 
ration. We shall sometimes write to mean the configuration whose 


only element is the set B—such a configuration is a 1-block configuration. 

Informally we read @ as saying “either all the elements of B, are true 
or all the elements of B, are true or ... or all the elements of B, are true.” 
More precisely, we define @ to be true under an interpretation (or 
valuation) I if @ contains at least one block all of whose elements are 
true under J. (In particular, the empty configuration is always false, 
whereas the configuration whose only block is the empty set is always 
true.) Then we define a configuration to be valid if it is true in all inter- 
pretations, and satisfiable if it is true in at least one. We define two con- 
figurations ¢@,, @, to be equivalent if they are true in the same inter- 
pretations. We say that @, implies @, if @, is true in every interpretation 
in which @, is true. Let us note that if we remove one or more elements 
from any block of a configuration @,, the resulting configuration @, is 
implied—indeed truth-functionally implied—by @, (i.e. @, is true in all 
Boolean valuations which satisfy @,). 


Let @ be a configuration [B, |---| B,| in which the blocks consists of 
unsigned formulas. Then the configuration @ is equivalent to the single 
formula B, V VB (if B; is empty, then by B; we shall mean t). We 
shall refer to B, v-::v B, as a translation of the configuration ¢. If ¢ is 
empty, then we define its translation to be f/f. 


For any finite set S of signed formulas, by § we shall mean the result 
of first unsigning the formulas (i.e. deleting “T”’s and replacing “F’’s by 
“~”s) and then taking the conjunction (the order is immaterial). Then 
for a configuration B, |: * [B, |whose blocks B; consist of signed formulas, 


we again call the formula B, v-::v B, a translation of the configuration 
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[B,|---[B, | We remark that the translation of a configuration is not 


unique, but any two translations are equivalent—indeed truth-function- 
ally equivalent—and contain the same predicates and parameters. 

Now we define @, to be a reduction of @, if @, can be obtained from 
@, by finitely many of the following operations: 


A: Replace any block by ; 


B: Replace any block by (i.e. we 
we replace by the two blocks | SB |, ; 
C: Replace any block by | S.y,(@) |; 


D: Replace any block by S,0(a) |, providing that a is 


new to the configuration. 


If @ is a configuration LS, |---| S, | then by @ we mean 


We thus can display our reduction operation in the following schematic 
form: 


6 [Sa 
6 [Sau | 
aE 
6 [SB] [Sa 
6 [Se 
é [Sau 


6 
—__———.., idi to @ | S,d}. 
¢ 5. 5(a) providing a iS new 


We call a block closed if it contains some element X and its conjugate 
X. If the block contains some atomic X and X, then we call the block 
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atomically closed. We call a configuration closed if each of its blocks is 
closed, and atomically closed if each of its blocks is atomically closed. 
A closed configuration is obviously unsatisfiable. 

We leave it to the reader to verify that any reduction of a satisfiable 
configuration is again satisfiable. Therefore if @ is reducible to a closed 
configuration, then @ is unsatisfiable. In particular, if a 1-block configura- 


tion is reducible to a closed configuration, then S must be unsatis- 
fiable. 


Next we wish to show that if S is unsatisfiable, then is reducible 


to an atomically closed configuration. This “completeness” theorem is an 
easy consequence of the completeness theorem for modified block 
tableaux. For any modified block tableau 7, define its corresponding 
configuration @ to be the set of end points of 7. Now, it is obvious that if @ 
is the corresponding configuration of 7, then @ is a reduction of the 
origin of 7. And if 7 is atomically closed, so is @. Now, if S is unsatis- 
fiable, then there is an atomically closed tableau for S. Hence the corres- 
ponding configuration @ of J is an atomically closed reduction of S. 
This proves: 


Theorem 1. S is unsatisfiable iff| S | is reducible to an atomically closed 
configuration. 
Exercise 1. Define S to be I’-inconsistent if is reducible to an 


atomically closed configuration. Establish Theorem 1 as a consequence of 
the Unifying Principle. 

Exercise 2. Show that a configuration @ (with possibly more than 
one block) is unsatisfiable iff @ is reducible to a closed configuration. 

Clashing Configurations. We shall say that an ordered pair ¢@,,@', > of 
configurations is reducible to an ordered pair <@,,,@.,» if there exists a 
finite sequence (@,,@; >,...,<G,, 6, »—which we call a reduction sequence— 
such that for each i<n, either @, , is obtained from @ or @',., is obtained 
from @; by (one application of) one of the operations A, B, C, D and 
moreover if it is operation D, then the parameter a must be new to both 
G and @’. If <@,,@)> is reducible to ¢%,@,>, and if the former pair is 
jointly satisfiable (i.e. if there is an interpretation in which ¢,,@, are both 
true) then the latter pair is also jointly satisfiable (why?). We shall say 
that a pair <¢,@’> of configurations clash if for each block B of @ and each 
block B’ of @’, BUB' is atomically closed. Obviously a clashing pair of 
configurations is not jointly satisfiable, hence any pair of configurations 
which is reducible to a clashing pair is not jointly satisfiable. 

If <.4,,.4> 1s a joint pair of modified block tableaux for S,|S,, and 
if €,, @ are the configurations corresponding to .4,, 4, respectively, 
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then <@,,@,> is a reduction of IS, |, |S, p (verify !). We know from § 1 
of the last chapter that if S, is incompatible with S,, then there does 
exist a clashing pair <7,,7,> of modified block tableaux for S,|S.. 
The corresponding configurations ¢,,6, obviously clash. We have 
thus shown: 


Theorem 2. S, is incompatible with S, iff CS, |, |S, p> is reducible 


to a clashing pair of configurations. 


Remarks. We wish to discuss how a clashing pair <@,,@,)> which 


is a reduction of ds, |, | Sop yields an interpolation formula for the 


stroke sequent S,|So. In the case of propositional logic, the matter is 
quite simple. Of course in propositional logic, our reduction procedure 
uses only operations A and B, and clearly if @, is reducible to @, using 
only operations A and B, then the configuration @, is equivalent to the 
configuration @,. We might also make the following remark: In both 
propositional logic and quantification theory, if (@,@,> is a reduction 
of <@,,@,>, then certainly @;, is a reduction of @, and @, is a reduction 
of @,. Now suppose conversely that @ is a reduction of @, and @, is 
a reduction of @,. Then in quantification theory, <@;,@,> is generally 
not a reduction of <@,,@,» (because of operation D), but in the case of 
propositional logic, it is a reduction. 

Now let S,,S, be (finite) sets of signed formulas of propositional 


logic, and let <@,,@,) be a reduction of dS, |, |S, which clashes. 


To find an interpolation formula for S |S. we proceed as follows. First 
we delete all closed blocks from @,; the resulting configuration @;, is 
obviously equivalent to @,. Then we delete all non-atomic elements from 
all blocks of @, and also all atomic elements X such that X does not 
occur in any block of @,. Then the resulting configuration—call it 
@,{@,—still clashes with @, (why?), and is implied by @,, and all pro- 
positional variables which occur in any block B; of @,/@, must occur 
in @,, hence they occur in both S, and in S,. Now let X be a translation 
of @,/@, and consider the signed formula TX. Clearly S, TX holds. 


And since @,| @, clashes with @,, and @, is equivalent to and TX 


is equivalent to @,[@,, then TX is incompatible with $,—1.e. $, > FX 
holds. And all propositional variables of X occur in both S, and S,. So 
TX is an interpolation formula for S,|S>. 


Further Remarks. At the propositional level, the use of configurations 
to obtain interpolation formulas is tantamount to reduction to disjunc- 
tive normal form (cf. Exercise 3, end of Chapter I). Indeed, suppose X is 
truth-functionally incompatible with Y. Let C, v---v C, be a reduction 
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of X to disjunctive normal form. If in each C; we delete all conjunctive 
components P;, where P; does not occur in Y, the resulting disjunctive 
normal formula C’, v --- v C;,is still incompatible with Y, and is still implied 
by X, and is hence an interpolation formula for X >(~ Y). 


Quantified Configurations. For Quantification Theory, the use of 
clashing configurations to obtain interpolation formulas is more com- 
plicated. The trouble is this: In propositional logic, our “reduction” 
operations A, B are such that any reduction of a configuration @ is 
equivalent to @, but (as we have already remarked), this is not the case 
in quantification theory because of operation D. We now remedy the 
situation as follows. 

By a parameter prefix—which we will also refer to just as a “prefix” — 
we shall mean an expression (q, 4,)(q24>)°*'(q,4,), Which we also write 
AS G4 41424z---Gn4y, Where a,,...,a, are distinct parameters and each q; 
is one of the symbols “V”, “4” (e.g. Va, J a,Va;Va, is a parameter 
prefix). We also allow the empty prefix. Now consider a prefix q,; a,...4,4, 
and an unsigned formula X and consider the expression gq, d,...q,@,X- 
Strictly speaking, this expression is not a formula, since our formation 
rules do not allow quantifying parameters. But for our present purposes, 
it will be convenient to “pretend” that a,,..., a, are variables rather than 
parameters. To be precise, let x,,..., x, be variables which do not occur 
in X (and such that x, 4x, for i4/); let X’ be the result of substituting x, 
for a,,...,X, fora, in X. Call q,x,...q,X,X' atranslation of q, a, ...qnQnX- 
By an interpretation J of the expression q,a,...q,a,X We mean an 
assignment of values to all predicates of X and to all parameters of X 
other than a,,...,a,. Now we define the expression q,4a,...q,a,X to be 
true under IJ if a translation q,X,...q,X,X 1S true under I. 

By a quantified configuration we shall mean an ordered pair <o,@) 
—also written o@—where @ is a configuration and o is a prefix such 
that every parameter which occurs in o also occurs in @ (i.e. in at least 
one element of at least one block of @). (It will prove technically con- 
venient to arrange matters so that we never have “vacuous” quantifiers 
in our prefix.) By a translation of o@ we shall mean a translation of o X, 
where X is a translation of @. By an interpretation I of o@ we mean an 
interpretation of o X, where X is a translation of @, and we call o@ true 
under I if o X is true under J. 

Preparatory to our consideration of “reduction” operations for 
quantified configurations, we make the following observations. Con- 
sider two prefixes ¢,,0, which contain exactly the same parameters. 
For such a pair we shall say that o, implies o,, or that o, is weaker than 
o,, 1f for any formula X with the same parameters as o, (or a,), 0, X 
implies o, X. Let us note the following implications of prefixes: 
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(1) VaVb implies VbVa. 

(2) JaVb implies Vbda_ (but not conversely). 
(3) dadb implies Jbda. 

(4) Va implies da. 


More generally: 


(1) o,VaVbo, implies o,VbVaao,. 

(2) o, dJaVbo, implies o, Vb dao,. 

(3) o,ia3jbo, implies o,3bjao,. 
(4) o,Vao, implies o, dao,. 


This means that in a prefix, if we move a universal quantifier any 
number of places to the left, or move an existential quantifier any number 
of places to the right, or if we change a universal quantifier to an existen- 
tial quantifier, we weaken the prefix. Thus 0, o, Vaimplies botho, Vac, 
and oa, J ao,. Using our notation “gq” to mean either “V” or “4”, we 
can say 0,0, Vaimplies o,qaoa,, regardless of whether gq is “V” or “J”. 

The following are our reduction operations for quantified configu- 
rations: 


v6 [Sa 
v6 [ Sa | 


6 [SP] 


By > 
o€ 
o6 | _ 
C: @ Saal?’ where o’ is defined as follows: If a is in o or in 
Oo oY Yla . 
Al or not in @| S,y,y(a) |, then o’=c. 
Otherwise, o’ is any prefix obtained by inserting 
either Va or Ja anywhere in o. 
A $5 | 
D: where a does not occur in 6 nor in @ and o’ 


at is defined as follows: If a does not occur in 6(a), 
then o’ =o. Otherwise o’ =a Ja. 


We remark that in operations A, B, D the conclusion is equivalent to 
the premise. As for operation C, if the first case holds (i.e. if a is in o 


or in @ or not in @| S,y,y(a) |), then the conclusion is equivalent 
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to the premise. In the second case, then o@ is equivalent to aVa 


6 S.y,p(a) |, which in turn implies o'@  S.y,7(a) |. Thus in all four 
operations, the premise always implies the conclusion. 

" An unquantified configuration @ is a logically distinct object from 
the quantified configuration ®@ (where @ is the empty prefix) even 
though they are true under precisely the same interpretations. In parti- 
cular, by a reduction of @ we mean a reduction using the original opera- 
tions A, B, C, D; by a reduction of ®@ is meant a reduction using the new 
operations A, B, C, D. Thus a reduction of ¢ is not in general implied 
by @, whereas a reduction of ®¢ is implied by @. 

We similarly define a reduction of an ordered pair <a, G,,0,@, (but 
in using operation D, the parameter a must be new to both quantified 
configurations). More precisely, to perform a reduction operation on an 
ordered pair <0, @,,0,,) we mean the act of performing the operation 
on just the first or second member of the pair, doing nothing to the other 
member, and if the operation is D, we demand that the principal para- 
meter a must be new to both @, and ©. 

For any prefixes o,, 0,, by o,{[0, we mean the result of deleting 
from oa, all quantifiers ga such that a does not occur in a,. (E.g. if 
6,=VadibdicVdando,=JdeVaifVc,theno,fo,=Vadc,andoa,fo, 
= VaVc.) By the dual o° of a prefix o is meant the result of changing each 
“7 to “J” and each “A” to “VW” (e.g. the dual of Va dbVc is J aVb4Ac). 
Obviously o, {a} is the same as o,[0,. We shall call a pair (¢,,0,) of 
prefixes a special pair if o,[o, is the dual of o,[o,—equivalently, if 
g,{/a03=(0,}6¢,)°. The following lemma is basic. 


Lemma I. If (@,,@,> is reducible to <G,,Q,» and if (o,,0,) is special, 
then there is a special pair (W,,W,) such that (0, €,,0,€,) is reducible to 


WD ,W2 D>. 


Proof. By an obvious induction argument, it suffices to prove the lemma 
for the case that (Z,,F,> 1s obtained from ¢¢,,@,)> by just one reduction 
step. If the step is operation A or B, then we obviously take w, to be o, 
and yw, to be o,. Now suppose the step is an application of operation C— 
applied say to the left member @, (a similar argument would apply if the 
application were to the right member @,). Let a be the principal parameter 
of the application. Of course we take , to be a,. As for w,, if the first 
case holds, then we have no choice but to take W, to be o,, in which case 
certainly (W,,w,) is special. Suppose the second case holds (i.e. a is not 
in o, nor @, but is in y(a)). If a does not occur in a,, then (a, Va, o>) is 
again a special pair, so we then take wy, to be a, Va. If ais in o,, then we 
take q to be “J” if Va occurs in a, or “VW” if da occurs in o,; then we 
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must put ga somewhere in the prefix o, so that the resulting prefix y, 
will be such that (W,,0,) is again special. We do this as follows. Let q,b 
be. the rightmost quantifier of ¢, such that b is to the left of a in o, and 
let qg,c be the leftmost quantifier of ¢, such that c occurs to the right of a 
in o,. Then we can insert ga anyhere in o, between q,b and q,c. This 
takes care of operation C. As to operation D, there is little to prove! 
We must take w,=o, and yw, to be o, if a does not occur in (a), or 
o4a otherwise. In the first case, (W,,w,)=(0,,0,) hence is special. In the 
second case, since a does not occur in 0, (because it does not occur in %,), 
then (o, J a,o,) is again special. This concludes the proof. 

Next we consider, in addition to the reduction operations A, B, C, D, 
the following two operations: 


E: (Existential Generalization) 


, providing a occurs in @ but not in o. 
ojia@ 


F: (Deletion) 


A 
o* , where @’ is the result of either removing a closed block from 
o€ €or removing an element from an open block of @, and o’ 
is the result of deleting all quantifiers ga from o such that a 


does not occur in @’. 


In operations E and F, the premise implies the conclusion (verify !). 
To perform operation FE or F on an ordered pair <0, @,,0, 6, of con- 
figurations, we mean the act of performing E, F oneither o, @, or 0, @). 

The main result we wish to show is that if S, is incompatible with S,, 


then by using operations A, B, C, D, E, F it is possible to reduce «@ Ss, |, 


6|S, } to a pair <0, 6,,0,€,) which satisfies the following four con- 
ditions: 
(1) @, clashes with @,. 
(2) All blocks of @, and of @, contain only atomic elements. 
(3) An element occurs in some block of @, iff its conjugate occurs in @,. 
(4) o, is the dual of o,. 

A pair (0, @,,0,@,> satisfying conditions (1), (2), (3), (4) above we 
shall call a basic pair. Such a pair is incompatible (i.e. not jointly satisfi- 
able) (why?). We re-state the result we wish to prove as 


Theorem 3. If S, is incompatible with S,, then <6| S, |, | S,) 
is A—F reducible (i.e. reducible using operations A, B, C, D, E, F) to 
a basic pair <0, 6,,02 62>. 
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Proof. Suppose S, is incompatible with S,. Then by Theorem 2, 
dS, | | $2) is reducible to a clashing pair <9,,,». Let a,,...,a, be 


the parameters (in any order) of S, which do not occur in S,; let b,,...,D, 
be the parameters common to S,, S,, and let c,,...,c, be the parameters 
of S, which do not occur in S,. Let w, be the prefix J a,,..., 4 a,; let y, 


be the prefix 4 c,,...,.dc,. Now <@ |S, |, |S, ) is reducible to 
Wy | Si |, Wo using operation E. Since W,, , contain no common 


parameters, then (w,,y,) is obviously a special pair of prefixes. And 


dS, | So p is reducible to <2,,D,>, so by Lemma I there is a special 
pair (',,W5) such that <p,| S, |,W2| S, ) is A, B, C, D reducible to 


XU, D1, D>. Hence <#| S, |, | S, } is A, B, C, D, E reducible to 


<wW', F,,W, D>. Now let @, be the result of first deleting all closed blocks 
from QY,, then all non-atomic elements from the remaining blocks, and 
in any blocks of Y,. Let a, be the result of deleting all quantifiers ga 
from yw’, such that a does not occur in @,. Similarly we define @, and a,. 
Now <wW',F,,W5, 9,» 1s reducible to <o,%,,0,¢,> by operation F. It 
remains to show that <o, @,,0,@,> is a basic pair 

Clearly @,, @, satisfy conditions (1), (2), (3) of our definition of a 
basic pair; the point now is to verify that o, is the dual of g,. Well, since 
(w',,W5) is a special pair, so is (o,, 02) (why?). Since (¢,, o,) is special, it 
remains only to show that o,, o, contain exactly the same parameters 
(and this will imply that ¢, =o). Well suppose k is a parameter of o,. 
Then k is in@,, but k is not in the set {b,,...,b,} (why?). The parameters 
of @, are obviously the same as the parameters of @,, hence k is in @,. 
Hence k is in Z,. But k is not in the set {b,,...,b,}, therefore k must be 
in the prefix w, (why?). Now the only parameters of wy, not in a, are 
those of 2, not in @,. But k is in @,, so k is in a. Thus all parameters of 
o, are in o,. A similar argument shows that all parameters of o, are ino,. 
This concludes the proof. 


Discussion. Suppose <® , ®| S,|> is A—F reducible to a 
basic pair (a, @,, 6,@,); let X, be a translation of o, @, and X, bea 
translation of o,@,. We assert that X, must be an interpolation for- 
mula for the stroke sequent S,|S, (and thus Theorem 3 affords yet 
another proof of Craig’s interpolation lemma—rather closer in spirit to 
the original proof of Craig). For we know that @,, @, contain the same 
predicates and parameters; o,, o, contain the same parameters, hence 
the predicates of X,, X, are the same, and the parameters of X, are 
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those of @, not in o,; the parameters of X, are those of @, not in a,, 
hence X,, X, contain the same parameters. All predicates and para- 
meters of X, are in S,; all predicates and parameters of X, are in S,, 
thus all predicates and parameters of X, are in both S, and S,. Finally, S, 
implies X,, S, implies X,, but X, is incompatible with X,, so S, im- 
plies ~ X,. Thus X, is an interpolation formula for S,|S>. 


§ 2. Linear Reasoning 


Theorem 3 can be converted to a theorem on linear reasoning in 
the following manner. 

By a dual configuration we shall mean an ordered pair <@, 0>—also 
written @°—where ¢ is a configuration. The “label 0 is to be thought 
of as directions for interpreting the configuration differently—e. read- 
ing the comma inside the blocks as “v” rather than “A”, and inter- 
preting juxtaposition of blocks as “a” rather than “v”. To be more 


precise, let @ be a configuration nee |B, |. Then we say that ¢° 


is true under a given interpretation IJ if every block of @ contains at 
least one element which is true under J. And we define a translation 
of e not as B,v vB, (which is a translation of @), but rather as 
B, A+: AB,. We shall sometimes write {B,}---{B,! for (| By |-~ | B, |)? 

Note that a one-block configuration | X | whose block contains 
only one element is equivalent to the dual configuration { X} (i.e. to °). 
Note also that if @ is closed, the translation of @ is truth-functionally 
unsatisfiable, whereas the translation of ° is a tautology. 

For any configuration @, by its conjugate configuration @ we mean 
the result of replacing every element X of every block by its conjugate 
X. We note the following facts: 

(a) Under any interpretation, @ has the opposite truth-value to @°. 
(b) @, implies @8 iff ¢, is incompatible with @,. 
(c) o,@9 implies o,@9 iff 9 @, implies o°¢,. 

We shall collectively refer to operations A, B, C, D, E, F—as applied 
to single quantified configurations—as L,-operations. Now we shall 
define the “duals” of L,-operations; these are to be applied to quantified 
dual configurations. We shall say that ,@° is obtainable from o, @? by 
a dual L,-operation iff ° @ , is obtainable from o$ @, by that L,-operation. 
We shall refer to dual L,-operations as L,-operations. In detail, the 
L,-operations are 


O. o€° {S,B1,B2} 
o* 4S, B} 
T° {S, 41} {S, a2} 


B®: 
o 6° {S,a} 
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a 6° {S,6,6(a)} 


C°: 5 , where o’ is defined as follows: 
0 6" iS, 6} (i) if a does not occur in o, then o’=o. 
(ii) ifa occurs in @° {S,6}, then o’ =o. 
(iii) if ga occurs in o but a does not occur in 
@° {S,5} then o’ is the result of deleting qa 
from o. 
po. FVAS {Sa} FPS} 


o6°'S,y} o 6° {S,y} 


where adoes not where a does not occur in @° {S,y} nor in 
occur in @°{S,y$ (a). 


E°: (Universal Instantiation) 


oVaG° 
oG° 

o€° , : 

—)» Where @, is the result of adding a closed block to @, or 

o> adding an arbitrary element to some block of @, and a’ 
is the result to taking those parameters a,,...,a, which 
occur in @, but not in o, and for each a,, inserting either 
Va; or J a; anywhere in the prefix o. 

In addition to the L,-operations and L,-operations, we finally con- 
sider the operation 


F°: 


S: (Switching Operation) 


6, 


>» where @, strongly clashes with Gy. 
06> 


We use the term “L-operations” collectively for L,,L, and S opera- 
tions. We say that o,@$ is L-deducible from o,@, is there exists a 
sequence of lines (called an L-deduction of o,@$ from o,@,), starting 
with o,@, and ending with o,@9, such that each line (except the first) 
is obtainable from the preceding line by an application of an L-operation. 
(Every L-deduction must obviously begin with L,-steps, then comes 
just one S-step, and then come L,-steps.) Since in all L-operations, the 


premise implies the conclusion, then if | S, P is L-deducible from] S, |, 
then the sequent S, — S, is valid. Theorem 3 now easily yields 


Theorem 4, (Completeness of Linear Reasoning). If S,->S, is valid, 


then there exists an L-deduction of | S,/° from 6| S, |. 
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Proof. Suppose S,—S, is valid. Then S, is incompatible with S,. 
Then by Theorem 3, < | S, |, o| 3, | » 1s A—F reducible to a basic 


pair <0@,, 6° @,>. This means that o@, is L,-deducible from ®| S, | 
(i.e. L-deducible using L,-operations) and o°@, is L,-deducible from 


@| S, |. Since @, strongly clashes with @,, then o(@,)° is obtainable from 
o@, by an S-step. Since o° , is L,-deducible from 6| S, |, then | S,/° 
is L,-deducible from o(@,)°, which in turn is S-deducible from o@,, 
which in turn is L,-deducible from ®| S, |. Thus 6| S, is L-deducible 


from 6) S, |. 


Remark. Consider an L-deduction of | S, from | S, |; let o@ 


be the last configuration of the deduction (the next line is the first dual- 
configuration). Then any translation of o@ is an interpolation formula 
for the sequent S, > S, (cf. the discussion following the proof of Theo- 
rem 3). 

The completeness of our system of linear reasoning derives ultimately 
from our completeness theorem for clashing tableaux. Two other new 
systems of linear reasoning—which arise naturally from our completeness 
theorem for clashing prenex tableaux and from the strong symmetric 
form of the fundamental theorem—are presented below. 


§ 3. Linear Reasoning for Prenex Formulas 


If we consider only prenex formulas, then we need use only configu- 

rations (and dual-configurations) with only one block. (This is a counter- 
part to the fact that prenex tableaux have only one branch.) We shall now 
identify a set S (of prenex sentences) with the 1-block configuration 


(and by S° we shall mean the dual configuration |S P). Using the 
completeness theorem for P-clashing prenex tableaux, one easily proves 


Theorem 5. If S,, S, are incompatible sets of prenex sentences, then 
<$,,5,> is C, D reducible (i.e. reducible using just operations C, D) to a 
pair <S',,S,)> such that SU S% is truth-functionally unsatisfiable. 

Next it is easily verified that Lemma I (preceding Theorem 3) holds, 
reading “C — D reducible” for “reducible”. We again consider operation E, 
and in place of operation F, the following operation: 


a,8 a 6 Le: . 
F: ——, providing S,>S, is a tautology, and all predicates and 
022 parameters of S, occur in S,, and oa, results from o, by 


deleting all quantifiers ga such that a does not occur in S,. 
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The following is the analogue of Theorem 3 for prenex formulas: 


Theorem 6. If S,,S, are incompatible sets of prenex sentences, then 
<®S,,@S,» is C, D, E, F reducible to a pair <o,S'‘,,0,S,> such that 
S', US), is truth-functionally unsatisfiable, and S',,S, contain the same 
predicates and parameters, and a, is the dual of o,. 

Theorem 6 is proved much in the manner of Theorem 3, using 
Theorem 5 in place of Theorem 2, and also using Craig’s Interpolation 
Lemma for propositional logic (verify !). 

Next we consider in place of operation S, the following operation: 


S aA A 
S’: 7" , where S, > S, is a tautology. 
aS, 


By the dual F’° of operation F’ we mean: 


a, Sy 6 Le: . 

: - providing S,>S, is a tautology, and all predicates and 

0252 parameters of S, are in S,, and oa, 1s the result of deleting 
all quantifiers ga from o, such that a does not occur in S,. 


Now Theorem 6 easily yields 


Theorem 7. (A Completeness Theorem for Linear Reasoning for 
Prenex Formulas). If S,—+S, is valid, then S2 is deducible from S, using 
operations C, D, E, F’ and their duals, and operation S’. 

The reader might find it of interest to compare this system with the 
original system of Craig [1 ]. 


§ 4. A System Based on the Strong Symmetric Form 
of the Fundamental Theorem 


This system (perhaps the simplest of all) again uses 1-block configu- 
rations but does not appeal to prenex normal form. It is like the preceding 
system except that we replace operations C, D by the following operations: 


C 15 h is a Boolean d d f 
——=<={z=z#»._. , where » is a Boolean descendent of some element 
o'| S,y> y(a)|_ of S, and o’ is o if ais ing or S or not in y(a); 
otherwise o’ is the result of putting J a or Va 
anywhere in o. 


D’: id where 6 is a Boolean descendent of some element 
o'| S,6 > d(a) of S, a does not occur in S nor in 6, and o’ is o or 
o ja depending respectively upon whether a 
does or does not occur in 6(a). 
The definition of the dual operations C’°, D’° should be obvious. 
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Theorem 8. For any sets S,,S, of sentences (not necessarily prenex), 
if S, >S, is valid, then S$ is deducible from S, using operations C’, D’, E, F’ 
and their duals and the operation S’. 

The proof of Theorem 8 should be easily obtainable to the reader—it 
uses in place of Theorem 3 the strong symmetric form of the Fundamen- 
tal Theorem (or more directly, the completeness of the system QQ in the 
Gentzen type formulation (cf. end of preceding chapter)) as well as 
Craig’s Interpolation Lemma for propositional logic. 
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